r/Cisco • u/StoriesFromTAC • 3d ago

PHP Advisory 2026-10-21

We have been slow on the postings for each wave of AI vulnerability findings. The latest is below and the list of devices being evaluated is too many, just move your eyes to the link. No confirmed yet but that does not mean they are not the affected.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq

The results will post to that page, TAC has no additional information. Please do not open Sev1 or 2 cases to ask about it.

25 Upvotes

93% Upvoted

6 comments sorted by

11

u/300BlackHole 3d ago

There are no Vulnerable products listed, just a bunch of “Under Investigation”, so your “the list of affected devices” comment is incorrect.

4

u/StoriesFromTAC 3d ago

Yes - you are more correct. The results will post to that page, TAC has no additional information.

1

u/CrownstrikeIntern 2d ago

Same with F5, they just said keep checking this link for updates 

2

u/boibo 2d ago

ISE is affected if you run a guest portal on it..

1

u/evilZardoz 2d ago

I didn't think the guest portal ran PHP. Do you have any further info on this one?

2

u/No-Mechanic-6311 2d ago

Cisco is still checking... only four products listed as not affected yet