{"id":46493,"date":"2026-10-22T09:32:39","date_gmt":"2026-10-22T09:32:39","guid":{"rendered":"https:\/\/mgglobal.eu\/?p=46493"},"modified":"2026-10-22T09:32:39","modified_gmt":"2026-10-22T09:32:39","slug":"moody-news-22-%d0%be%d0%ba%d1%82%d0%be%d0%bc%d0%b2%d1%80%d0%b8-2026-%d0%b3","status":"publish","type":"post","link":"https:\/\/mgglobal.eu\/en\/moody-news-22-%d0%be%d0%ba%d1%82%d0%be%d0%bc%d0%b2%d1%80%d0%b8-2026-%d0%b3\/","title":{"rendered":"MOODY NEWS \u2014 October 22, 2026."},"content":{"rendered":"<h2>New development<\/h2>\n<h3>Critical vulnerabilities in PHP require immediate update<\/h3>\n<p>EU and international scope \u00b7 Cybersecurity and digital services \u00b7 Official warning and available fixes<\/p>\n<p>On October 21, the PHP team released fixes for CVE-2026-109618 and CVE-2026-109619, which could allow unauthenticated remote code execution. ENISA, CERT-EU, and other European authorities have called for immediate action. The patched versions are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Affected organizations should identify where PHP is used directly or through vendors, coordinate the update, and prioritize publicly available systems. It is important for security management systems to retain evidence of the assessment of applicability, installed patches, and post-change verification. This is a technical warning, not a finding that a specific organization has been compromised.<\/p>\n<h3>APS becomes mandatory for ISCC CORSIA audits<\/h3>\n<p>International scope Sustainable aviation fuels and certification Start of mandatory scheme requirement<\/p>\n<p>From 22 October, all ISCC CORSIA audits must use the Audit Procedure System \u2014 APS. This is the start of the already announced scheme requirement published on 22 September, and not a new regulatory decision. The previous audit procedures in Word format are no longer the intended transitional option. Certification bodies and auditors should check access to the APS, applicable procedures, team training and how audit records are stored. Operators in the sustainable aviation fuel chain should agree with their authority the necessary data and evidence before starting the audit. The requirement is for the ISCC CORSIA scheme and is not generalizable to all certification regimes.<\/p>\n<h3>EU extends conditional derogations for battery interchangeability<\/h3>\n<p>EU \u00b7 Product Safety and Ecodesign \u00b7 Delegated Regulation published<\/p>\n<p>Delegated Regulation (EU) 2026\/1770, published on 22 October, extends the cases in which a portable battery can be removed and replaced by an independent professional instead of the end-user. The categories covered include certain wearable devices, food temperature probes and equipment for explosive atmospheres, under specific safety conditions. The act enters into force on 11 November; the essential requirements of Article 11 of Regulation (EU) 2023\/1542 apply from 18 February 2027. Manufacturers must document why the derogation is necessary for the product concerned and check the design, instructions and service procedures. This is not a general exemption from interchangeability or safety assessment.<\/p>\n<h3>UK recognizes EN IEC 60079-28:2026<\/h3>\n<p>England, Scotland and Wales Explosion-proof equipment and testing Published standard reference<\/p>\n<p>By notification 0144\/26 of 22 October, the UK published a reference to EN IEC 60079-28:2026 for the protection of equipment and transmission systems using optical radiation in potentially explosive atmospheres. The new standard has already been included in the SI 2016\/1107 regime for England, Scotland and Wales. The reference to EN 60079-28:2015 will be withdrawn on 4 March 2028; from that date the old edition will no longer give presumption of conformity under this regime. Manufacturers, laboratories and assessment bodies should check the version used in the technical files and the transition plan. This is a confirmed publication and not a continuation of the September proposal.<\/p>\n<h3>EN 71-15:2025 is included in the British toy regime<\/h3>\n<p>England, Scotland and Wales \u00b7 Toys and Chemical Testing \u00b7 New reference for formamide<\/p>\n<p>Notice 0143\/26 of 22 October adds EN 71-15:2025 to the set of standards under the UK Toy Safety Regulations. The standard covers the content of formamide in foamed materials for toys. For manufacturers, importers and laboratories this is a new official reference when building evidence of conformity for the market in England, Scotland and Wales. The applicability to the specific material, the analytical method used and the scope of competence of the testing laboratory should be checked. The notice itself should not be presented as a new universal concentration limit or as an automatic recognition of any existing test report.<\/p>\n<h3>New British reference for three flame retardants in toys<\/h3>\n<p>England, Scotland and Wales \u00b7 Toys and Chemical Testing \u00b7 New reference to EN 71-16:2025<\/p>\n<p>EN 71-16:2025 has been included in the UK list of specified standards for toy safety by notification 0143\/26 from 22 October. It covers certain chlorinated phosphorus flame retardants \u2014 TCEP, TCPP and TDCP \u2014 in toy materials. The change is relevant to manufacturers, component suppliers and laboratories preparing evidence for the market in England, Scotland and Wales. It is necessary to match the composition of the materials, the test applications and the revision of the method used. The reference does not constitute a new general ban on all flame retardants and does not replace the assessment of specific legal restrictions.<\/p>\n<h3>EC recommends monitoring of chlorinated paraffins in food<\/h3>\n<p>EU \u00b7 Food and laboratory testing \u00b7 Monitoring recommendation<\/p>\n<p>Recommendation (EU) 2026\/2335, published on 22 October, calls on Member States and food business operators to monitor chlorinated paraffins in food during 2026-2029. The sum of C10-C17 compounds is to be determined and, if thresholds are exceeded, extended analysis, including C18-C30, is to be carried out. This is a recommendation for reliable data collection, not a new regulation on maximum levels. Laboratories should check the validation of methods, available standards and high-resolution analysis capabilities. Operators should agree sampling and data format with EFSA. Thresholds for additional testing should not be interpreted as an automatic ban on sale.<\/p>\n<h3>US extends transition for certain international mail items<\/h3>\n<p>USA \u00b7 Market Access and Regulatory Data \u00b7 Final Extension<\/p>\n<p>On October 22, CBP extended the deadline for compliance with specific formal customs clearance requirements for international mail shipments until January 20, 2027. The change affects certain goods subject to requirements of other U.S. agencies, as well as the tariff and preferential categories specified in the rule. The previous deadline was October 22. This does not restore the de minimis exemption or waive product requirements. Exporters and their logistics partners should verify the applicability of 19 CFR 145.12(a)(2)(v) and (vi), the readiness of information systems, and documents to the U.S. importer. The extension provides time for preparation, not a blanket authorization to import non-compliant products.<\/p>\n<h2>Upcoming deadlines<\/h2>\n<h3>Two weeks until the new recognition of RSB EU RED<\/h3>\n<p>EU; Global Fuel Chains \u00b7 Sustainable Fuels and Certification \u00b7 Reminder T\u201314<\/p>\n<p>Implementing Decision (EU) 2026\/2316 on the recognition of RSB EU RED enters into force on 5 November. Today&#039;s inclusion is a reminder T-14 and not a new adoption of the act published on 16 October. The recognised scope includes the sustainability criteria, emission savings and chain data for different renewable and recycled carbon fuels specified in the decision. Operators and certification bodies must compare the scheme scope used, mass balance and Union database information with the current recognition. The decision repeals the previous recognition under 2022\/607 and applies until 5 November 2031. It does not automatically certify the compliance of a specific batch.<\/p>\n<h3>Week for opinions on simplified ship inspection in the USA<\/h3>\n<p>USA \u00b7 Shipping and Inspection \u00b7 Consultation \u2014 Reminder T\u20137<\/p>\n<p>The US Coast Guard is accepting comments on draft NVIC 02-99, Change 1, for the Streamlined Inspection Program until October 29. There are seven days left until the end of the reopened consultation announced on September 29. The document is a draft guidance, not a new, effective inspection obligation. This is an opportunity for ship operators and professionals with US activities to review how the proposed framework relates to their own inspection procedures and evidence. Comments should be directed to specific sections and justify the proposed changes. Before submitting, it is necessary to read the draft itself in file USCG-2026-0041; this reminder confirms the deadline without imputing untested technical requirements.<\/p>\n<h2>Strategic Watch<\/h2>\n<h3>BDS EN 18120-1:2026 offers a framework for recyclable plastic packaging<\/h3>\n<p>Bulgaria and the EU \u00b7 Packaging, design and evaluation \u00b7 Current baseline \u2014 first inclusion<\/p>\n<p>The BDS catalogue confirms that BDS EN 18120-1:2026 is a valid standard, published on 18 May, with a Bulgarian text from 13 October. This is an initial baseline for the review, not a standard issued today. Part 1 sets out a framework and principles for the compatibility of plastic packaging with collection, sorting and recycling. The new BDS announcement of 21 October announces the launch of the series on 4 November. Manufacturers, designers and quality teams can use the moment to review the materials and necessary evidence. The mere existence of the standard does not prove mandatory application or an automatic presumption of compliance with European packaging legislation.<\/p>\n<p>Published by MG Global in partnership with ERPI.<\/p>","protected":false},"excerpt":{"rendered":"<p>\u041d\u043e\u0432\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438\u0437\u0438\u0441\u043a\u0432\u0430\u0442 \u043d\u0435\u0437\u0430\u0431\u0430\u0432\u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0415\u0421 \u0438 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u0435\u043d \u043e\u0431\u0445\u0432\u0430\u0442 \u00b7 \u041a\u0438\u0431\u0435\u0440\u0441\u0438\u0433\u0443\u0440\u043d\u043e\u0441\u0442 \u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u0438 \u0443\u0441\u043b\u0443\u0433\u0438 \u00b7 \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0438 \u043d\u0430\u043b\u0438\u0447\u043d\u0438 \u043a\u043e\u0440\u0435\u043a\u0446\u0438\u0438 \u041d\u0430 21 \u043e\u043a\u0442\u043e\u043c\u0432\u0440\u0438 \u0435\u043a\u0438\u043f\u044a\u0442 \u043d\u0430 PHP \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0432\u0430 \u043a\u043e\u0440\u0435\u043a\u0446\u0438\u0438 \u0437\u0430 CVE-2026-109618 \u0438 CVE-2026-109619, \u043a\u043e\u0438\u0442\u043e \u043c\u043e\u0433\u0430\u0442 \u0434\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u043e\u0442\u0434\u0430\u043b\u0435\u0447\u0435\u043d\u043e \u0438\u0437\u043f\u044a\u043b\u043d\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u0432\u0430\u043d\u0435. ENISA, CERT-EU \u0438 \u0434\u0440\u0443\u0433\u0438 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438 \u043e\u0440\u0433\u0430\u043d\u0438 \u043f\u0440\u0438\u0437\u043e\u0432\u0430\u0445\u0430 \u0437\u0430 \u043d\u0435\u0437\u0430\u0431\u0430\u0432\u043d\u0438 [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":46333,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[42],"class_list":["post-46493","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-moody-news-daily"],"_links":{"self":[{"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/posts\/46493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/comments?post=46493"}],"version-history":[{"count":1,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/posts\/46493\/revisions"}],"predecessor-version":[{"id":46494,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/posts\/46493\/revisions\/46494"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/media\/46333"}],"wp:attachment":[{"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/media?parent=46493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/categories?post=46493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mgglobal.eu\/en\/wp-json\/wp\/v2\/tags?post=46493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}