RUGGEDCOM APE1808 PAN-OS affected by PHP2Shell flaws
Original title: Siemens RUGGEDCOM APE1808
CVE-2026-109618 scores 9.8 and CVE-2026-109619 scores 8.1; both are use-after-free issues that can lead to remote code execution.
Siemens says RUGGEDCOM APE1808 running Palo Alto Networks PAN-OS is affected by two PHP runtime flaws called PHP2Shell. CVE-2026-109618 and CVE-2026-109619 are use-after-free conditions that multiple out-of-memory or stale-state strategies can turn into remote code execution. Affected PAN-OS lines listed are 10.2, 11.1, 11.2, 12.1, and 12.2, all versions. Customers should upgrade to the corresponding available PAN-OS version and contact support for patch details.
Unconfirmed: The advisory does not name the exact fixed PAN-OS builds.
- CVE-2026-109618 is CVSS 9.8 and CWE-416.
- CVE-2026-109619 is CVSS 8.1 and CWE-416.
- The advisory covers APE1808 with PAN-OS 10.2, 11.1, 11.2, 12.1, and 12.2.
- Deployment is described as worldwide in critical manufacturing.
- This is a CISA republication of Siemens SSA-566512.
Impact: Unauthenticated remote code execution via PHP use-after-free
| Product | Affected | Fixed in |
|---|---|---|
| Siemens RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS | 10.2 All, 11.1 All, 11.2 All, 12.1 All, 12.2 All | corresponding available PAN-OS version |
- 1.Upgrade to the corresponding available PAN-OS version.
- 2.Contact Siemens customer support for additional patch information.
- 3.Apply the workarounds in Palo Alto Networks' upstream notifications.
- Vendors
- SiemensPalo Alto Networks
- Products
- RUGGEDCOM APE1808PAN-OS
- Organizations
- CISASiemens ProductCERT
- Countries
- Germany
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-109618+1 related CVE | OOM longjmp memory flaw enabling RCE in PHP | 9.2 | 100% | KEVPoC ×25 | KEV |
From the original article
4 min read at cisa.govView CSAF Summary Palo Alto Networks has published information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.