CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests. Organizations should immediately update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 …
Advisory at a Glance
| Title | #StopRansomware: SafePay Ransomware |
|---|---|
| Original Publication | October 20, 2026 |
| Executive Summary |
This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses … |
Summary
Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.
The following versions of Moxa AIG-302 ThingsPro Edge are affected:
- Moxa AIG-302 ThingsPro Edge firmware <=1.4.0 (CVE-2026-109812, CVE-2026-109813)
| CVSS | Vendor | …
|---|
Summary
Successful exploitation of these vulnerabilities could crash the Windows kernel.
The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:
- PEAK-System Device Driver Setup <=5.1.2.1151 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960)
- PCAN Windows CAN device drivers <=5.1.2 (CVE-2026-109576, CVE-2026-101103, …
Summary
Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices allow an authenticated low-privileged user to bypass intended privilege boundaries. The issues affect both the routing configuration functionality and the authorization model for PROFIBUS …
Summary
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
The …