Skip to content
OpenAdvisories
High ICSA-26-202-02 3 CVEs

Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW

Published Jul 14, 2026 · Updated Jul 21, 2026 · Revision 2

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.

Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.

[1] https://security.paloaltonetworks.com/

Vulnerabilities 3

  • Medium 5.7
    CVE-2026-0273 Public exploit

    PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.6
    CVE-2026-0272

    PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

    A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is s…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 0.4
    CVE-2026-0266

    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

    A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series fir…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #2

    Initial CISA Republication of Siemens ProductCERT SSA-104023 advisory

  2. #1

    Publication Date

References