Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 8.5.12 : patch affected systems soon.
Data as of 26 Oct 2026, 17:11 UTC
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 8.5.12
What to do
AI-suggested
Patches for the PHP engine addressing these vulnerabilities are available in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 and should be applied promptly. Industrial vendors have released or are releasing patches for affected products; customers should obtain and apply these updates as soon as possible. Where patches are not yet available, vendors have provided mitigations or workarounds, such as disabling vulnerable interfaces or applying vendor-specific fixes. Users should follow official vendor advisories and support channels for the latest remediation guidance. No vendor advisory indicates that no action is required; active patching or mitigation is necessary.
Description
The PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) are critical flaws in the PHP engine allowing unauthenticated remote code execution. Multiple industrial vendors including Siemens, Schneider Electric, ABB, and others have confirmed that some of their products are affected. Patches for PHP were released on October 21, 2026, shortly after exploitation attempts began. Several vendors have released or are preparing patches for affected products, while some continue to assess impact or provide mitigations. The vulnerabilities have been actively targeted in the wild, with millions of exploitation attempts reported and confirmed attacks on honeypots.