cisa advisories

CISA has published an industrial control systems advisory for Johnson Controls OpenBlue Employee, warning that versions through V2025.3.1 contain three web-application flaws that could let an attacker upload malicious files, run stored cross-site scripting attacks, or inject arbitrary HTML into...

CISA has published an advisory for CVE-2026-5846, a flaw in Watchfire Controller Software that could let an authenticated attacker deliver malicious firmware and ultimately take full control of an affected digital-sign controller. The issue affects Watchfire BC550, BC750, BC760, and BC760DC...

CISA has issued ICS Advisory ICSA-26-211-03 for Toptech Systems RCU II+ and Multiload II+ units, warning that an unauthenticated network service can expose a debug interface with full root-level control of the embedded Linux system. For operators using these devices in loading-bay environments...

CISA has warned that NASA Core Flight System Health and Safety Application versions 7.0.1 and earlier contain a high-severity flaw that can crash the application and trigger a processor reset. The issue, tracked as CVE-2026-18064, affects a component designed to monitor software health in...

A newly disclosed vulnerability in the igloohome Smart Lock Mobile Application for Android exposes an uncomfortable truth about connected access systems: the risk does not necessarily begin at the physical lock. In ICSA-26-209-06, the U.S. Cybersecurity and Infrastructure Security Agency (CISA)...

CISA’s advisory for CVE-2026-11889 is narrowly scoped but important: only SALTO ProAccess Space installations running versions earlier than 6.13 with partitioning enabled are affected. Exploitation requires valid authenticated operator credentials. Organizations using partition-enabled...

Rockwell Automation users running CompactLogix, ControlLogix, Compact GuardLogix, or GuardLogix controllers should move quickly to inventory and update affected firmware after CISA published advisory ICSA-26-197-06 covering three critical denial-of-service vulnerabilities that can force a...

CISA published an advisory warning that Rockwell Automation 1715-AENTR firmware through version 3.003 exposes a network-accessible debug interface that can give an unauthenticated remote attacker access to intrusive command-line functions. Tracked as CVE-2026-10577 and rated 10 out of 10 under...