Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
82
Vendor
Schneider Electric
- Mentions · 7d1
- Mentions · 30d4
- All mentions17
- First seenAug 19, 2026
- Last mentioned6d ago
Timeline
17 articles · newest firstNvidia unveils DSX POD modular AI data centers at GTC Berlin
Factory-built Vera Rubin containers need power, cooling and network on site; first units ship in early 2027.
38
[Control systems] Schneider Electric security advisory (AV26-1051)
Canada’s Cyber Centre warns of a data-authenticity flaw in Schneider Electric Sage RTU controllers.
42
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.
68
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels
US Coast Guard and FBI boarded two oil tankers after cyberattacks disrupted engines, navigation, and communications; suspected Iranian involvement remains unconfirmed.
75
Schneider Electric PowerChute Serial Shutdown
CISA and Schneider Electric warn that PowerChute Serial Shutdown 1.5 and prior lack brute-force protection, allowing unauthorized account access via unlimited authentication attempts.
20
Schneider Electric Modicon M340 Controller and Communication Modules
CISA warns CVE-2025-6625 lets unauthenticated attackers crash Schneider Electric Modicon M340 controllers and communication modules via a crafted FTP command.
32
Schneider Electric NetBotz 5 750/755
CISA and Schneider Electric issued an advisory for NetBotz 5 750/755 covering OS command injection and Hibernate SQL injection flaws in versions 5.5.2 and prior.
25
[Control systems] Schneider Electric security advisory (AV26-912)
Canada's Cyber Centre relays a Schneider Electric advisory covering multiple vulnerabilities in EcoStruxure IT Data Center Expert and PowerLogic T300, urging users to apply updates.
18
Cybersecurity jobs available right now: August 18, 2026
Help Net Security lists current cybersecurity job openings at ADI Global Distribution, Schneider Electric, L'Oreal, GovCIO, Elastic, and others across multiple countries.
10
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws
September ICS Patch Tuesday brings critical fixes from Schneider Electric, Siemens, and Aveva, including CVSS 9.2 authentication flaw CVE-2026-3869 in Modicon M580 controllers.
52
In most cities, nobody owns the whole network
Former Waco CIO argues cellular-connected water controllers sit outside scanned networks, and accountability plus operating-budget funding—not technology—block segmentation.
35
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)
CISA updated ICSA-26-169-07: CVE-2026-4827 (CVSS 8.3) insufficient entropy enables session hijacking across dozens of Schneider Electric grid products; fixes available.
48
[Control systems] Schneider Electric security advisory (AV26-871)
Canada's Cyber Centre relayed Schneider Electric advisories for vulnerabilities in NetBotz 5-750/755 (5.5.2 and prior) and PowerChute Serial Shutdown (1.5 and prior).
24
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout used Anthropic's Claude to port a working pre-auth RCE exploit for CVE-2021-31886 between WAGO PLCs, executing ARM shellcode on live hardware.
45
US agencies warn of AI-powered attacks on Siemens industrial controllers
NSA, CISA, FBI, DOE, and EPA warn threat actors use AI-assisted scripts and snap7 libraries to access internet-exposed Siemens S7 PLCs in critical infrastructure sectors.
70
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology
NSA and FBI warn of an active campaign using AI-generated exploit scripts against Siemens S7 PLCs in critical infrastructure sectors.
78
Related CVEs
by mentions- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-3143198%7.8Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface
- CVE-2021-318863%9.8A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…
- Flawed Authentication Algorithm in Schneider Electric PLC Enables Full Compromise
- CVE-2026-4827<1%8.7CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in…
- CVE-2025-6625<1%8.7CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device
- CVE-2026-13336<1%7.3OS Command Injection via Malicious Backup Restore in Schneider Electric Product
- CVE-2026-13348<1%6.9Password brute-force flaw in Schneider Electric PowerChute Serial Shutdown
- CVE-2026-13337<1%5.1Authenticated HQL Injection in Schneider Electric NetBotz 5 750/755
Appears with
- CISAorganization · 8
- Siemensvendor · 7
- Rockwell Automationvendor · 6
- FBIorganization · 4
- NSAorganization · 3
- Canadian Centre for Cyber Securityorganization · 3
- PowerChute Serial Shutdownproduct · 2
- EcoStruxure IT Data Center Expertproduct · 2
- Hitachi Energyvendor · 2
- PowerLogic T300product · 2
- CISAvendor · 2
- CERT@VDEorganization · 2
- ABBvendor · 2
- Moxavendor · 2
- Johnson Controlsvendor · 2
- Sage RTUproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.