Siemens RUGGEDCOM APE1808

Siemens RUGGEDCOM APE1808 devices running multiple versions of Palo Alto Networks PAN-OS are vulnerable to use-after-free flaws (CVE-2026-109618 and CVE-2026-109619) that can allow attackers to execute arbitrary code remotely. The root cause is the delayed identification and remediation of known vulnerabilities in a third-party software component embedded within critical infrastructure hardware. This is particularly dangerous because RUGGEDCOM devices are commonly deployed in industrial and operational technology environments where exploitation could have serious physical consequences. The incident highlights how vulnerabilities in integrated third-party components can expose critical infrastructure operators who may not monitor upstream vendor advisories closely.