# Source: Moxa’s Response Regarding CVE-2026-109618 and CVE-2026-109619 in PHP | Moxa

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Moxa: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · primary · captured

# Moxa’s Response Regarding CVE-2026-109618 and CVE-2026-109619 in PHP | Moxa

**Moxa** · [https://www.moxa.com/en/support/product-support/security-advisory/mpsa-260001-moxa%E2%80%99s-response-regarding-cve-2026-109618-and-cve-2026-109619-in-php](https://www.moxa.com/en/support/product-support/security-advisory/mpsa-260001-moxa%E2%80%99s-response-regarding-cve-2026-109618-and-cve-2026-109619-in-php) · published 2026-10-22 · added by `breaking@php.newsroom (curator's role)` · slug `moxa-mpsa-260001`

Promoted from the source watch (pack vault 7r83qic5), snapshot 20261027T191336Z, queue priority 2 (hand-picked by breaking@php.newsroom in the researcher's role from The Hacker News's report of 27 October on CISA's confirmation, board breaking-0002; read in the curator's role). Moxa's response MPSA-260001 (Release Date: Oct 22, 2026).

## What it says, as the collector read it

#### Moxa’s Response Regarding CVE-2026-109618 and CVE-2026-109619 in PHP | Moxa

Promoted by breaking@php.newsroom (in the curator's role) from the source watch (pack vault `7r83qic5`), page `tw/security-vendor/moxa/moxa-mpsa-260001`, snapshot `20261027T191336Z`. Copied byte for byte; every file's sha256 is in `captures/20261027T191336Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Read in the curator's role._

Moxa's response MPSA-260001 (Release Date: Oct 22, 2026).

> Moxa has determined that none of our products are affected.

> Release Date: Oct 22, 2026

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Moxa MPSA-260001 (22 Oct): Moxa has determined that none of its products are affected.

Supports: vendor response: products affected / not affected; board breaking-0002.

#### Capture notes

Language `en-us`. tools/capture_batch.mjs (Playwright Chromium), HTTP 200, captured 2026-10-27T19:13:55Z. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261027T191336Z · HTTP 200 · https://www.moxa.com/en/support/product-support/security-advisory/mpsa-260001-moxa%E2%80%99s-response-regarding-cve-2026-109618-and-cve-2026-109619-in-php- `headers.json` a935c9372b3d96b3a4685d6edaa16811de7006ef801f9364c43f40f94a617166 1,776 bytes
- `page.html` 289f8db9773f5b51af3b2c0f42fe8a088a2cdb05c2a273307c5e71eeeec1d719 103,004 bytes
- `provenance.json` b3fe93180871c5cc19d766e57852d318fffb995c2710f405c7c1dff823f8a269 1,810 bytes
- `rendered.html` c17465d77c879e774a2ce1d9929987657bebb54231fc875bbf4c27c24795097c 157,303 bytes
- `screenshot.jpg` 1709a09784c12d19158dcb757400d87b33756950aa4e4f5a9c78551918359e52 164,030 bytes
- `text.txt` a4abb96196a4ac618de6b3a969362120ba24254a77bf6eb86b88fb1fb6cd3e49 5,288 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.49 · data as of 2026-10-27T19:13Z · vault commit 6f0d5c50bf12 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/moxa-mpsa-260001/index.html