Cyber Risks November 12, 2026 · CISA Advisories

Siemens Building Automation and Energy Products

View CSAF Summary On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products. As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens'

Read the original at CISA Advisories ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-109618 CVE-2026-109619
Related: Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) Cyber Risks · Oct 29, 2026
PHP2Shell: What to know about two critical PHP flaws Cyber Risks · Oct 26, 2026