---
title: Siemens: Node2Shell and php2shell reach Desigo CC, Gridscale X, RUGGEDCOM APE1808, Industrial Edge and building/energy products (CVSS 9.8) | ctxsec
url: https://ctxsec.com/items/siemens-ics-nov-12-node2shell-php2shell-desigo-gridscale-ruggedcom-ape1808-industrial-edge
description: "CISA republished five Siemens advisories on downstream exposure to October's runtime bugs. Node2Shell (Brotli, CVE-2026-111497) affects Desigo CC V8 and V9, Gridscale X DSA 5.3, Gridscale X PSS\u00aeE before 36.8.0 and many Industrial Edge Management configurators and services. php2shell (CVE-2026-109618/109619) affects Building Automation and Energy products including AMIS TS, blueplanet 360 NX3 inverters and Energy Engage. RUGGEDCOM APE1808 (which runs Palo Alto PAN-OS) is affected by both, and Siemens points to Palo Alto's workarounds."
status: "official (CISA ICS advisories ICSA-26-316-01 to -05, republishing Siemens ProductCERT, Nov 12, 2026); not reported exploited in these products"
published: 2026-11-12
---

> CISA republished five Siemens advisories on downstream exposure to October's runtime bugs. Node2Shell (Brotli, CVE-2026-111497) affects Desigo CC V8 and V9, Gridscale X DSA 5.3, Gridscale X PSS®E before 36.8.0 and many Industrial Edge Management configurators and services. php2shell (CVE-2026-109618/109619) affects Building Automation and Energy products including AMIS TS, blueplanet 360 NX3 inverters and Energy Engage. RUGGEDCOM APE1808 (which runs Palo Alto PAN-OS) is affected by both, and Siemens points to Palo Alto's workarounds.

[← Cybersecurity News](/news) · [markdown](/items/siemens-ics-nov-12-node2shell-php2shell-desigo-gridscale-ruggedcom-ape1808-industrial-edge.md)

official (CISA ICS advisories ICSA-26-316-01 to -05, republishing Siemens ProductCERT, Nov 12, 2026); not reported exploited in these products

2026-11-12 3:39 PM ET

### Siemens: Node2Shell and php2shell reach Desigo CC, Gridscale X, RUGGEDCOM APE1808, Industrial Edge and building/energy products (CVSS 9.8)

- **Do now:** update where Siemens has fixed versions (e.g. the Industrial Edge configurators); for products marked all versions, apply Siemens' mitigations and restrict network access until fixes ship.
- **Industrial Edge:** Siemens says an IEM with no Management Applications installed needs no action; Edge Hub and IEM Cloud got WAF protection on Siemens' side.
- **APE1808:** follow Palo Alto's upstream advisories for PAN-OS.

Sources: [CISA ICSA-26-316-01: Siemens Building Automation and Energy Products (php2shell)](https://www.cisa.gov/news-events/ics-advisories/icsa-26-316-01) · [CISA ICSA-26-316-02: Siemens Desigo, Gridscale (Node2Shell)](https://www.cisa.gov/news-events/ics-advisories/icsa-26-316-02) · [CISA ICSA-26-316-03: Siemens Industrial Edge Management (Node2Shell)](https://www.cisa.gov/news-events/ics-advisories/icsa-26-316-03) · [CISA ICSA-26-316-04: Siemens RUGGEDCOM APE1808 (Node2Shell)](https://www.cisa.gov/news-events/ics-advisories/icsa-26-316-04) · [CISA ICSA-26-316-05: Siemens RUGGEDCOM APE1808 (php2shell)](https://www.cisa.gov/news-events/ics-advisories/icsa-26-316-05)