Briefings ·
OTASEC Daily Briefing | 25-10-2026
A quiet day: Siemens has published two advisories as a follow-up to the PHP2Shell story, and one vendor launch targets OT asset documentation.
1Update: Siemens publishes PHP2Shell advisories, including RUGGEDCOM APE1808
New since the earlier coverage: Siemens ProductCERT issued SSA-566435, which sets out the impact of the two critical unauthenticated remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619, disclosed on 21 October) on its software products. A second advisory, SSA-566512, lists Siemens industrial products affected through PAN-OS on RUGGEDCOM APE1808 devices and points customers to the workarounds in the upstream Palo Alto Networks notifications.
For asset owners: Check whether you run RUGGEDCOM APE1808 devices or the Siemens software listed in the advisories, and apply the Palo Alto Networks workarounds where relevant.
2Corsha launches Folio for OT network mapping and documentation
Corsha, a provider of industrial identity security solutions, announced Folio, a new module designed to automate OT network mapping and industrial system documentation.
For asset owners: This is a vendor announcement; if your asset inventory and network documentation are outdated, assess whether tooling like this fits your needs.