Siemens Building Automation and Energy Products (ICSA-26-316-01)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Cybersecurity Advisories
Cyber ThreatOfficial statement
At a glance
- What
- Cyber Threat
- Who
- CISA Cybersecurity Advisories
- When
- Nov 12, 2026 at 12:00 PM UTC
Official Statements
CISA Cybersecurity Advisories, November 12: “View CSAF Summary On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products. As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.”
Source: CISA Cybersecurity Advisories
