Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
82
- Mentions · 7d0
- Mentions · 30d2
- All mentions5
- First seenSep 17, 2026
- Last mentioned16d ago
Timeline
5 articles · newest firstICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.
68
ABB Protection and Control IED Manager PCM600
CISA discloses local privilege-escalation and path-traversal flaws in ABB PCM600 2.14 and earlier.
44
[Control systems] ABB security advisory (AV26-942)
Canada's Cyber Centre relayed ABB advisory AV26-942 addressing CVE-2023-5778, a missing length check flaw in Freelance Controller industrial devices.
22
ABB Ability Edgenius
CISA's ABB advisory covers CVE-2026-31431, a public Linux kernel flaw letting local users or compromised containers gain root on Ability Edgenius gateways.
40
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-3143198%7.8Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface
- Length-parameter flaw enables unauthenticated DoS in ABB Freelance Controllers
- Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600)
- Path Traversal in ABB PCM600 through 2.14
Appears with
- CISAorganization · 3
- Rockwell Automationvendor · 2
- Siemensvendor · 2
- Johnson Controlsvendor · 2
- Hitachi Energyvendor · 2
- Schneider Electricvendor · 2
- Moxavendor · 2
- Beldenvendor · 1
- Edgenius Gateway bE100product · 1
- Harmony STW6product · 1
- Wibu-Systemsvendor · 1
- ABB Freelance Controllerproduct · 1
- Honeywellvendor · 1
- 1732E ArmorBlockproduct · 1
- EcoStruxure Security Expertproduct · 1
- NetModule NRSWproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.