ics patch management

ABB’s AC500 V3 PLC line has a critical stack buffer overflow in its Cryptographic Message Syntax parsing path, disclosed by ABB on March 12, 2026 and republished by CISA on May 12, 2026, affecting AC500 V3 PM5xxx firmware 3.9.0 and 3.9.0_HF1. The fix is AC500 V3 firmware 3.9.0 HF1, but the...

Siemens has published an urgent security advisory for TeleControl Server Basic after ProductCERT and national tracking authorities assigned CVE‑2025‑40942 to a local privilege escalation flaw that—if an attacker gains local access—could allow execution of arbitrary code with elevated rights...