Skip to content
OpenAdvisories
Critical 2 exploited CVEs 3KXG141033R4801 3 CVEs

ACF5000 LCS/CCUS PHP2Shell and OpenSSL Vulnerabilities

Published Nov 12, 2026 · Updated Nov 12, 2026

Vendor: ABB Product: ACF5000 CCUS Product: ACF5000 LCS

Summary

An update is available that resolves the publicly reported vulnerabilities in the PHP and OpenSSL components in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could insert and run arbitrary code. An attacker who successfully exploited the OpenSSL vulnerability (CVE-2026-35189) could cause a denial of service of the affected products.

Vulnerabilities 3

  • Critical 9.2
    CVE-2026-109618 Exploited Public exploit Scanner template EPSS 100%

    RCE via OOM corruption

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • Critical 9.2
    CVE-2026-109619 Exploited Public exploit Scanner template EPSS 100%

    RCE via stale global state

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • Medium 5.3
    CVE-2026-35189

    Excessive Memory Allocation in Relative CRLDP Processing

    Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memo…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1

    Initial version.

References

  • ABB CYBERSECURITY ADVISORY - PDF Version
    https://search.abb.com/library/Download.aspx?DocumentID=3KXG141033R4801&LanguageCode=en&DocumentPartId=&Action=Launch
  • SMT for ACF5000 software
    https://search.abb.com/library/Download.aspx?DocumentID=SW%2FACF5000_LCS-CCUS%2FAO_SMT_5_6&LanguageCode=en&DocumentPartId=&Action=Launch
  • SMT user manual
    https://search.abb.com/library/Download.aspx?DocumentID=UM%2FSMT&LanguageCode=en&DocumentPartId=&Action=Launch
  • AO-HMI for ACF5000
    https://search.abb.com/library/Download.aspx?DocumentID=SW%2FACF5000_LCS-CCUS%2FAO_HMI_P5_6&LanguageCode=en&DocumentPartId=&Action=Launch