Two serious vulnerabilities in PHP have been found and published. Several web servers were taken down until they have been patched. 

As Tufin points out in their knowledge base, TOS and TufinOS are not affected by CVE-2026-109618 or CVE-2026-109619.

So, no action is required, and there's no patch or mitigation to apply.