Insight 21 Oct 2026

How We Responded Quickly to CVE-2026-109618 and CVE-2026-109619 with Admin Companion

When early reports surfaced around CVE-2026-109618 and CVE-2026-109619, two critical PHP vulnerabilities with potential unauthenticated remote code execution, there was not yet a trusted distribution package to install. Admin Companion accelerated the response on a Debian, Apache, PHP, and Joomla stack. It did not replace administrator expertise or approval. Instead, it proposed checks, prepared safe commands, executed approved actions, and kept the operational loop tight: validate, reduce exposure, monitor, patch, and verify.

Administrator-192x192 ayonik engineering
admin Companion Security Response

First, Admin Companion validated the documented runtime against the live system. The website was served through Apache with mod_php, so mitigations and restarts had to target the Apache PHP runtime, not just the command-line PHP binary.

Next, with administrator approval, Admin Companion reduced exposure before the patch arrived. Joomla's built-in maintenance mode was not the right option because it is still served by Joomla/PHP. Instead, Admin Companion created a static maintenance page in the site's corporate design, including the original site's background video, in two iterations and within two minutes.

Security Update Static Maintenance

The public site was temporarily moved away from the Joomla/PHP document root, and Admin Companion then verified that public requests no longer reached Joomla PHP entry points.

To avoid repeatedly checking manually, Admin Companion created a watcher for official PHP package updates. The goal was a highly visible terminal signal as soon as Debian Security made the fixed package available, suitable for running in a dedicated terminal window on an additional monitor. The watcher detected the fixed Debian PHP package at 13:49 UTC, within minutes of its availability.

PHP Security Update Watcher

The administrator approved the update through the trusted repository path. Finally, Admin Companion verified that Apache had really loaded the fixed PHP module and was not still mapping an old deleted library.

A senior administrator could do these steps manually. Admin Companion made the response faster, and more consistent, while keeping the administrator in control of each system-changing action.