Home / Items
Vendor advisoryKnown exploitedSeverity 9.8 criticalExploit likelihood 100%
ABB Manufacturing Execution System- PHP Vulnerabilities in DokuWiki installations
4hzk000017 · ABB · October 23, 2026
Summary
ABB is aware of publicly reported vulnerabilities in the product listed as affected in the advisory.
Updates to the affected component that fixed the vulnerabilities are available.
An attacker who successfully exploited this vulnerability could remotely execute code on the server run-ning Dokuwiki.
No active exploitations of the vulnerabilities have been reported by the time of writing this document
From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
The vulnerabilities are not tight to any specific MES version but solely depend on the delivery including Dokuwiki, which relies on affected PHP versions.
The affected PHP versions are listed in CERT-EU - Critical Vulnerabilities in PHP Reference section.
The problem is corrected in the following product versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
ABB recommends that customers apply the updates immediately. The updates are applied by updating the PHP packages in operating system of the servers that run Dokuwiki.
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical…
Updating to a release containing the patches is the only complete and reliable mitigation.
You should immediately update the PHP component in Dokuwiki to one of the following: 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
PHP is installed on the web server / operating system, so upgrading PHP is a server administration task.
• To check the version of PHP: use ‘php -v’ (as ‘root’).
• The exact names and availability of individual PHP packages vary by distribution release.
To see the list of installed PHP packages: dnf list installed 'php*'.
o Typical package names on RHEL-family systems look like:
-…
The only workaround, while patches are not installed, is to temporarily shut down the Dokuwiki server(s).
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-109618 | 9.8 critical | Exploited | 100.0% |
| CVE-2026-109619 | 9.8 critical | Exploited | 100.0% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- October 23, 2026: Initial version.
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com