Google Responds to Two Critical PHP Vulnerabilities: Cloud Platform Itself Unaffected, Gemini 4 Argon Involved in Attack Detection and Patch Verification

On October 21, Google has responded to the PHP core vulnerabilities CVE-2026-109618 and CVE-2026-109619. Google stated that the Google Cloud platform itself is not affected by these two vulnerabilities, but users running PHP on the platform may still face risks. Google also stated that Gemini 4 Argon was involved in vulnerability discovery, exploit development, attack detection, and patch verification.