U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks
2026-11-10T08:52:11Z•9d5d4d5e4fac2bcb76f60f326aa899cfd5f871224da5655ad932e78f5e805246
CVE-2026-109618CVE-2026-109619CVE-2026-111497BrotliBrotli2ShellCISA-KEVOT-securityPHPPHP2ShellSLEDcold-chaincritical-infrastructurefood-and-agriculturehealthcareindustrial-control-systemsindustrial-refrigerationpublic-exploitremote-code-executionshadow-AIvulnerability-management
What happened
Tenable reports active and emerging cybersecurity risks affecting critical infrastructure and widely deployed software. Key issues include attacks against industrial refrigeration and cold-chain systems, unauthenticated remote code execution in PHP (CVE-2026-109618 and CVE-2026-109619), and the Brotli2Shell vulnerability (CVE-2026-111497), for which remote code execution, public PoCs, and KEV listing are reported. The content emphasizes urgent patching, exposure discovery, OT isolation, removal or hardening of remote access, replacement of end-of-life systems, and governance of shadow AI in S/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- tenable_blog
- Record identifier
- 9d5d4d5e4fac2bcb76f60f326aa899cfd5f871224da5655ad932e78f5e805246
- Enrichment time
- 2026-11-10T08:52:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.