Vulnerabilities · InfosecFeed Brief
Siemens Building Automation and Energy Products
Vulnerabilities
What you need to know
On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products. As a general security measure…
Source transparency
Read the original report at CISA Alerts ↗
This is an InfosecFeed curated brief based on reporting from CISA Alerts. InfosecFeed does not claim ownership of the original reporting.