CRA Article 14 Archives - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

CRA Article 14

What CRA Article 14 Requires...

Key Takeaways Since 11 September 2026, CRA Article 14 requires you to notify within 24 hours of becoming aware that an actively exploited vulnerability exists in your product. A top-level...