ics vulnerabilities

Siemens SINEC INS versions before V1.0 SP2 Update 6 are affected by four vulnerabilities disclosed by Siemens ProductCERT on June 9, 2026, and republished by CISA on June 23, with the most serious issues rated 8.8 under CVSS v3.1. The short version is simple: update the industrial network...

ABB’s B&R Automation Studio versions earlier than 6.5 and version 6.5 are affected by a critical set of third-party component vulnerabilities, republished by CISA on May 21, 2026, after ABB first issued advisory SA25P007 on February 18, 2026. The awkward part is not that a vendor patched an...

Intrado’s 911 Emergency Gateway (EGW) has landed in the crosshairs of a severe security advisory, and the details make clear why defenders in emergency services and enterprise telephony should treat it as urgent. CISA says CVE-2026-6074 affects EGW 5.x, 6.x, and 7.x, carries a 9.8 critical...

The Carlson Software VASCO-B GNSS Receiver has landed in the spotlight because CISA says a remotely reachable authentication flaw could let an attacker alter critical functions or disrupt operation. The affected range is VASCO-B GNSS Receiver versions before 1.4.0, tracked as CVE-2026-3893, and...

The newly disclosed Silex Technology SD-330AC and AMC Manager vulnerability set is a reminder that device-management software can be just as dangerous as the hardware it controls. CISA says successful exploitation could enable arbitrary code execution, denial of service, and unauthenticated...

The latest CISA industrial control systems advisory puts a sharp spotlight on Contemporary Controls BASC-20T and, more specifically, on an old building automation controller that should probably never have been left to age quietly on live networks. According to the advisory, successful...

CISA has published an industrial-control-systems advisory (ICSA-26-057-08) that calls out a cluster of high‑severity authentication and session‑management flaws in Mobility46’s public-facing charging‑station software (mobility46.se), warning that successful exploitation could let attackers gain...

Jinan USR IOT Technology’s USR‑W610 serial‑to‑Wi‑Fi/ Ethernet converter is the subject of a high‑severity Industrial Control Systems advisory that names four vulnerabilities (CVE‑2026‑25715, CVE‑2026‑24455, CVE‑2026‑26049, CVE‑2026‑26048) affecting firmware releases up to and including version...

A high‑severity industrial control systems advisory published on February 19, 2026, warns that Welker’s OdorEyes ECOsystem Pulse Bypass System with the XL4 controller is vulnerable to an unauthenticated control‑function flaw (tracked as CVE‑2026‑24790) that could let a remote actor manipulate...

CISA has published an industrial control systems advisory warning that RISS SRL’s MOMA Seismic Station firmware up to and including v2.4.2520 (CVE‑2026‑1632) exposes its web management interface without requiring authentication — a design failing that permits unauthenticated remote actors to...

Schneider Electric has published a security notification confirming an Incorrect Default Permissions weakness in EcoStruxure™ Process Expert that could allow a local, low-privileged user to escalate privileges by modifying executable service binaries in the installation directory and waiting for...