OT Security Weekly DACH, KW 44/2026: PHP2Shell in OT products
The overall threat level for OT in Germany, Austria and Switzerland is elevated for calendar week 44/2026. Power & grids, food & beverage and machine builders are each rated high. PHP2Shell (CVE-2026-109618/-109619) dominated the week. CISA added it to its KEV catalog on 26 October. In parallel, attackers exploited a Cisco ASA/FTD zero-day that crashes SSL-VPN devices, which are the remote access many operators use for remote maintenance. CISA listed both PHP vulnerabilities as actively exploite
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.