Connect X300 vulnerabilities

2 known vulnerabilities in Connect X300 from Siemens. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  PHP Stale Internal Request-State Exploited

  CVE-2026-109619Oct 21, 2026PHP GroupEPSS 100%

  PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse

• 9.8 Critical severity

  PHP Memory Corruption Exploited

  CVE-2026-109618Oct 21, 2026PHP GroupEPSS 100%

  PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su