Live threats
HighUnpatched Check Point Gateways Exploited via PHP2Shell, Granting Root Access and Enabling Wiper Attacks BreachUS DOJ Seizes $1.2 B Stolen from Binance Theft and Disrupts North Korean ‘FaceStealer’ Social‑Engineering Tool Rule changeFederal Register limits automated scraping of its sites, directing users to APIs DeadlineNARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests CriticalCritical Use‑After‑Free RCE (CVE‑2026‑109618/109619) in Siemens RUGGEDCOM APE1808 Industrial Routers BreachScreenConnect Attacks Compromise ≥ 288 Endpoints in 48 Organizations via Rogue Remote‑Access Clients Rule changeFPF launches four-part virtual roundtable series on Agentic AI, privacy risks and PETs CriticalZero‑Day SignDrop Exploit Escalates to SYSTEM and Bypasses Windows Defender
Updated 08:43 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF Critical 📡 Vulnerability

Critical Buffer Overflow (CVE‑2026‑111497) in Siemens RUGGEDCOM APE1808 Risks Remote Code Execution

CISA has flagged a CVE‑2026‑111497 buffer overflow in the Brotli decoder used by Siemens RUGGEDCOM APE1808 devices running PAN‑OS. The flaw allows unauthenticated attackers to execute code or cause denial‑of‑service, prompting urgent patching. It highlights the importance of supply‑chain patch management for control‑assurance and audit readiness.

ADTP Breach Watch · November 12, 2026 · CISA Advisories
SeverityCritical
Type📡 Vulnerability
ConfidenceHigh
ReportedNov 12, 2026
Manufacturing & Industrial MANUF_IND Vulnerability Exploit

What happened

CISA disclosed a critical out‑of‑bounds write in the Brotli library (CVE‑2026‑111497) affecting Siemens RUGGEDCOM APE1808 devices with PAN‑OS. An unauthenticated attacker can send a crafted Brotli stream to corrupt memory, leak data, crash the device, or execute arbitrary code. The vulnerability scores 9.8 on CVSS and impacts critical manufacturing networks worldwide.

Why it matters for trust and compliance

  • The flaw demonstrates why continuous verification of third‑party components and documented patch cycles are essential control objectives for secure configuration and vulnerability remediation.
  • Provides evidence of the need for ongoing third‑party library version tracking.
  • Supports continuous monitoring of patch status as audit‑ready control evidence.

Who is affected

MANUF_IND

Recommended actions

  1. Upgrade the Brotli library on all APE1808 devices to version 1.0.10, 1.1.1, or 1.2.1.
  2. Apply the latest PAN‑OS firmware that incorporates the patched library.
  3. Disable Brotli compression if immediate firmware updates are not possible.
  4. Segment the device from untrusted network zones and monitor decoder error logs.

Details

CVEs
CVE-2026-111497

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.