Siemens RUGGEDCOM APE1808
Palo Alto Networks has published information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. The following versions of Siemens RUGGEDCOM APE1808 are affected: RUGGEDCOM APE1808 vers:all/* (CVE-2026-109618, CVE-2026-109619) CVSS Vendor Equipment v3 9.8 Siemens RUGGEDCOM APE1808 1 Vulnerability Use After Free Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnera
- Vendor
- Palo Alto Networks, PHP, Siemens
- Product
- PAN-OS, PHP, SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
- EPSS
- 1.00 (p100)
- Exposure class
- Edge / VPN / firewall, Web platform, OT / ICS
Why it ranks 70 (Critical)
- EPSS 1.00 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Palo Alto Networks)
- Covered by 42 independent sources
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA ICS Advisories (cisa.gov)
- CVE-2026-109618 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-109619 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.