PHP2Shell Remote Code Execution (RCE) Security Vulnerabilities CVE-2026-109618 and CVE-2026-109619

Prev Next

Vulnerability Description

Vulnerabilities have been identified in the CTERA Edge Filer administrative interface. Attackers may exploit these vulnerabilities to remotely execute malicious code on affected systems, potentially resulting in complete system compromise, sensitive data theft, ransomware attacks, and service disruption. This vulnerability has been assessed by CTERA to have a critical level of severity.

Vulnerability Details

Publication Date: Oct 21 2026

CVSS 4.0 score of 9.2

Affected CTERA Products

CTERA Edge Filer (all versions before, and including, 7.11.5100.38, 7.12.5400.27, and 7.13.6000.25)

Analysis

This vulnerability is considered critical, as edge filers running affected, unpatched versions may remain exposed to remote exploitation, putting your organization's infrastructure, data, and business continuity at significant risk.

CTERA products other than CTERA Edge Filers are not affected.

Workaround

If upgrade is not immediately possible, block access to the administrative interface of the edge filer (port 443) using firewall rules until you can upgrade.

Permanent Solution

CTERA Edge Filers 7.12.5400.28 and 7.13.6000.26 contain a fix for this issue. Customers who have not upgraded to this or a higher version are advised to schedule a short maintenance window for installing this patch version on their edge filers.

Related Articles

Vulnerability Remediation