PHP2Shell RCE flaws keep spreading into industrial software

CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution (CVSS 9.8). Festo has updated fix guidance for FactoryViews and MES4 installs that bundle XAMPP.

CVE-2026-109618PHPOT

Updated 9 Nov 2026

CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution (CVSS 9.8). Festo has updated fix guidance for FactoryViews and MES4 installs that bundle XAMPP.

What to do

Treat this as urgent. Check whether you run the affected product, apply the vendor fix, and review logs for signs of compromise from before the patch.

Original reporting: daily.dev / Security Boulevard

Original reporting: daily.dev / Security Boulevard

Discussion

0 comments

Get the Weekly Wire

The week's exploited vulnerabilities and breaches, in one email.

More Vulnerabilities

CriticalVulnerabilities7 Nov 2026

SonicWall patches exploited SonicOS flaw that weakens VPN logins

CVE-2026-19868 lets an attacker with credentials for one login method slip past SAML checks, including SAML-enforced MFA.

CVE-2026-19868VPNMFA bypass

SecurityWeek

CriticalVulnerabilities6 Nov 2026

Attackers hit OpenSSH 'SSHole' flaw within hours of disclosure

A newly disclosed OpenSSH bug can let attackers sign in to accounts that have no password set. Researchers saw exploitation attempts almost immediately, and one honeypot was taken to root. Audit for passwordless accounts and update OpenSSH as soon as your distribution ships the fix.

OpenSSHLinuxRoot access

The Hacker News

HighVulnerabilities6 Nov 2026

D-Link warns of multiple zero-days in DGS-3130 switches

Enterprise switch owners should check D-Link's advisory and restrict management interfaces until fixes are applied.

D-LinkZero-day

Cybersecurity News roundup