ot patch management

Schneider Electric’s PowerLogic P7 protection and control platform, used in advanced electrical network environments worldwide, is affected by three disclosed vulnerabilities in firmware version 0.2.003.001.000 and earlier, with CISA republishing Schneider’s advisory on June 25, 2026, after the...

CISA on June 25, 2026, published an industrial control systems advisory for Daktronics Controller Firmware, warning that vulnerable DMP-5000, VFC-DMP-5000, and DMP-8000 devices could allow unauthenticated attackers to gain root-level control if left exposed. The advisory is not just another...

On June 18, 2026, CISA republished Rockwell Automation’s SD1773 advisory warning that FactoryTalk Historian Site Edition 11 and earlier releases contain three vulnerabilities that can let attackers obtain valid authentication tokens, trigger denial-of-service conditions, or crash affected...

Schneider Electric and CISA are warning that CVE-2026-6865 affects EasyLogic T150 firmware version 11.06.31 and earlier and Saitel DP firmware version 11.06.36 and earlier, allowing authenticated users to access sensitive files through a path traversal flaw in server-side file handling. The fix...

CISA republished ABB’s B&R advisory on May 26, 2026, warning that CVE-2025-3450 can let an unauthenticated network attacker abuse the System Diagnostics Manager in affected Automation Runtime versions before 6.3 and Q4.93 to delete data and trigger denial-of-service conditions. The uncomfortable...

Siemens and CISA warned on May 12 and May 14, 2026, that SIMATIC CN 4100 communication nodes running versions before V5.0 contain multiple vulnerabilities, with Siemens releasing V5.0 and urging industrial operators worldwide to update affected deployments in critical manufacturing environments...

CISA republished ABB’s April 2026 advisory on April 30, 2026, warning that ABB Ability Symphony Plus S+ Engineering versions 2.2 through 2.4 SP2 are exposed to four PostgreSQL vulnerabilities that can allow authenticated attackers on the S+ client/server network to execute code or SQL. The...