Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
82
Product
Ruggedcom APE1808
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 22, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstRUGGEDCOM APE1808 inherits Nozomi Guardian and CMC flaws
All listed APE1808 versions are affected; the highest detailed score is 7.5 for unvalidated Smart Polling connections.
58
Related CVEs
by mentions- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-33388<1%6.4An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges
- CVE-2026-33389<1%5.3An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target…
- CVE-2026-33391<1%5.3An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges
- CVE-2026-33387<1%5.1Dashboards functionality due to improper validation of an input parameter: An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be…
- CVE-2026-33920<1%5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token
Appears with
- Siemensvendor · 2
- CISAorganization · 1
- Rockwell Automationvendor · 1
- Johnson Controlsvendor · 1
- Visonic PowerManageproduct · 1
- Beldenvendor · 1
- EcoStruxure Security Expertproduct · 1
- Hitachi Energyvendor · 1
- Wibu-Systemsvendor · 1
- Schneider Electricvendor · 1
- NetModule NRSWproduct · 1
- Nozomi Networksvendor · 1
- Nozomi Guardianproduct · 1
- Moxavendor · 1
- ProLeiT LINEoptimizeproduct · 1
- Cloudflareorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.