Citrix Patches 12 Critical NetScaler and Secure Access Client Flaws Including Authentication Bypass and Multiple DoS Issues

Siemens Warns of Critical RUGGEDCOM APE1808 Vulnerabilities Tied to PAN-OS PHP Flaws

Siemens has released an advisory detailing two high-severity vulnerabilities affecting the RUGGEDCOM APE1808 industrial device when running Palo Alto Networks PAN-OS software. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, both stem from Use After Free conditions in PHP handling of out-of-memory errors and global state management. Exploitation can lead to remote code execution with CVSS scores of 9.8 and 8.1 respectively. The issues impact all versions of PAN-OS from 10.2 through 12.2 when deployed on the RUGGEDCOM APE1808 platform. Siemens recommends upgrading to patched PAN-OS releases and implementing network segmentation as immediate defensive measures. CISA has republished the advisory to increase visibility across critical infrastructure sectors worldwide.

CISA Issues Advisory on Siemens Desigo CC and Gridscale Products Affected by Critical Brotli Vulnerability

The advisory details how a critical out-of-bounds write vulnerability in the Brotli decoder, tracked as CVE-2026-111497 and nicknamed Node2Shell, impacts multiple Siemens industrial products. Originally disclosed by the Node.js project on October 21, 2026, the flaw resides in Google Brotli versions 1.0.3 through 1.2.0 and can lead to memory corruption, sensitive data disclosure, denial of service, or arbitrary code execution. Affected Siemens offerings include all versions of Desigo CC family V8 and V9, Gridscale X DSA versions from 5.3 up to but not including 5.4, and Gridscale X PSS®E versions below 36.8.0. Siemens has issued remediation guidance recommending installation of the latest .NET security updates or product version upgrades to V5.4 and V36.8.0 respectively. The vulnerability carries a CVSS v3.1 base score of 9.8 and affects critical infrastructure sectors worldwide, including energy and manufacturing. CISA republished the Siemens ProductCERT advisory to increase visibility while emphasizing network segmentation, VPN usage, and pre-deployment validation of patches.

Critical Flaws in Red Hat Quay Expose All Private Container Images to Read and Overwrite Attacks

Red Hat has disclosed two critical vulnerabilities in its Quay container registry platform that allow attackers to read, overwrite, or delete private container images across all repositories. The first flaw, CVE-2026-123710 with a CVSS score of 9.8, enables an attacker to inject a persistent trusted signing key that bypasses authentication for any repository, even when anonymous access is disabled. The second issue, CVE-2026-110697 scoring 9.9, stems from an unescaped SQL LIKE pattern in robot account listing that lets any namespace creator steal decrypted tokens from other tenants. Both flaws affect every Quay 3 and Quay 5 release and impact standalone deployments, OpenShift-integrated registries, and the mirror registry. Red Hat recommends blocking the /keys endpoint at the proxy layer, auditing for suspicious service_key_rotate events, and restricting namespace creation containing underscores until patches are applied. The upstream fixes add token rotation validation, mandatory key expiry, and proper escaping for robot account searches.