ics patch management

CISA republished ABB PSIRT advisory SA26P009 on June 30, 2026, warning that CVE-2025-31115 in XZ Utils affects multiple B&R Industrial Automation terminal products worldwide, with fixed Terminal OS releases now available for PPC3100, C50, C80, FT50, MT50, T30, T80, and T50 devices. The flaw is...

ABB’s AC500 V3 PLC line has a critical stack buffer overflow in its Cryptographic Message Syntax parsing path, disclosed by ABB on March 12, 2026 and republished by CISA on May 12, 2026, affecting AC500 V3 PM5xxx firmware 3.9.0 and 3.9.0_HF1. The fix is AC500 V3 firmware 3.9.0 HF1, but the...

Siemens has published an urgent security advisory for TeleControl Server Basic after ProductCERT and national tracking authorities assigned CVE‑2025‑40942 to a local privilege escalation flaw that—if an attacker gains local access—could allow execution of arbitrary code with elevated rights...