Siemens Warns of Critical RUGGEDCOM APE1808 Vulnerabilities Tied to PAN-OS PHP Flaws
Siemens has released an advisory detailing two high-severity vulnerabilities affecting the RUGGEDCOM APE1808 industrial device when running Palo Alto Networks PAN-OS software. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, both stem from Use After Free conditions in PHP handling of out-of-memory errors and global state management. Exploitation can lead to remote code execution with CVSS scores of 9.8 and 8.1 respectively. The issues impact all versions of PAN-OS from 10.2 through 12.2 when deployed on the RUGGEDCOM APE1808 platform. Siemens recommends upgrading to patched PAN-OS releases and implementing network segmentation as immediate defensive measures. CISA has republished the advisory to increase visibility across critical infrastructure sectors worldwide.
CISA AlertsNov 12, 2026Translated from English