Google Responds to Core PHP Vulnerability: Cloud Platform Unaffected, Gemini 4 Argon Deeply Involved in Fix Verification

On October 21, Google responded to the core PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. Google stated that the Google Cloud platform itself is unaffected by these two vulnerabilities, but users running PHP on the platform may still face risks. Google also noted that Gemini 4 Argon participated in vulnerability discovery, exploit development, attack detection, and patch verification.