CriticalVulnerabilities
PHP2Shell RCE flaws keep spreading into industrial software
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution (CVSS 9.8). Festo has updated fix guidance for FactoryViews and MES4 installs that bundle XAMPP.
daily.dev / Security Boulevard