CyberSecureTodayCSTCyberSecureToday

Advisory hub

ICS/OT Security Advisories: PLC, SCADA and DCS Vulnerabilities

128 advisoriesUpdated

Industrial control system flaws rarely get patched on the IT timetable. Controllers run for a decade, maintenance windows are planned months ahead, and many fixes ship as firmware that has to be validated against a live process first. That makes the advisory itself, with its affected firmware ranges and compensating controls, the document asset owners actually work from.

This hub tracks the CISA ICS advisories (ICSA and ICSMA) and OEM PSIRT disclosures we have covered for Siemens, Rockwell Automation, Schneider Electric, Mitsubishi Electric, Honeywell, Yokogawa, ABB and others. Each row links to our breakdown of the flaw, the exposure on the Purdue model and the IEC 62443 controls that limit it while a firmware update is scheduled.

Advisories

ICS/OT advisories: ID, product, severity, CISA KEV status and fix
IDProduct & issueSeverityKEVFixPublished
CVE-2026-107777Thermo Fisher Torrent Suite Path Traversal Flaw Exposes Clinical Genomics Servers to File ExfiltrationHighNoVendor advisory
CVE-2026-62927Eclipse Milo Auth Bypass & DoSCriticalNoSee remediation
CVE-2026-48901Thermo Fisher Auth Bypass, RCECriticalNoSee remediation
—Engineering IEC 62443-3-2 Zones and Conduits for SL-3 and SL-4 TargetsHighNoVendor advisory
—ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA NetworksCriticalNoVendor advisory
CVE-2026-80840Yokogawa CENTUM VP HIS RCECriticalNoVendor advisory
CVE-2026-79880Siemens S7-1500 DCP TamperingHighNoVendor advisory
CVE-2026-79350ABB System 800xA InjectionCriticalNoVendor advisory
CVE-2026-79220GE Vernova Mark VIe InjectionCriticalNoVendor advisory
CVE-2026-79110Honeywell ML200 PLC OverflowCriticalNoVendor advisory
CVE-2026-78950Phoenix Contact ILC OverflowCriticalNoVendor advisory
CVE-2026-78820Mitsubishi MELSEC-Q PLC DoSCriticalNoVendor advisory
CVE-2026-77880Schneider Foxboro DCS OverflowCriticalNoVendor advisory
CVE-2026-76880Siemens Energy Manager PRO RCECriticalNoVendor advisory
CVE-2026-75890Mitsubishi iQ-F PLC OverflowCriticalNoVendor advisory
CVE-2026-74810Delta CNC HMI OOB WriteCriticalNoVendor advisory
CVE-2026-73850Honeywell IQ4 BACnet OverflowCriticalNoVendor advisory
CVE-2026-72840Yokogawa CENTUM VP FCS DoSCriticalNoVendor advisory
CVE-2026-71880ABB 800xA Recipe TamperingCriticalNoVendor advisory
CVE-2026-70820Rockwell ControlLogix 5580 DoSCriticalNoVendor advisory
CVE-2026-69880Emerson Ovation Heap OverflowCriticalNoVendor advisory
CVE-2026-68840Siemens SCALANCE Sig BypassCriticalNoVendor advisory
CVE-2026-67890Schneider Modicon M580 RCECriticalNoVendor advisory
CVE-2026-65810Phoenix Contact FL SWITCH RCECriticalNoVendor advisory
CVE-2026-64890Honeywell Experion C300 DoSHighNoVendor advisory
CVE-2026-63820Siemens S7-1500 Web OverflowCriticalNoVendor advisory
CVE-2026-62870Emerson DeltaV RPC RCECriticalNoVendor advisory
CVE-2026-61845Yokogawa FCS Memory CorruptionCriticalNoVendor advisory
CVE-2026-60891Rockwell FTView SE Auth BypassCriticalNoVendor advisory
CVE-2026-59820Mitsubishi iQ-R Access ControlHighNoVendor advisory
CVE-2026-58902ABB Symphony Plus SCADA RCECriticalNoVendor advisory
CVE-2026-57812GE Vernova Mark VIe DoSHighNoVendor advisory
CVE-2026-56891Yokogawa FAST/TOOLS RCECriticalNoVendor advisory
CVE-2026-55829Schneider Modicon M580 DoSHighNoVendor advisory
CVE-2026-54890AVEVA System Platform PrivEscHighNoVendor advisory
CVE-2026-53891Omron Sysmac Session HijackingHighNoVendor advisory
CVE-2026-52873Honeywell IQ4 Signature BypassCriticalNoVendor advisory
CVE-2026-51982Siemens WinCC OA Auth BypassCriticalNoVendor advisory
CVE-2026-50891Schneider Geo SCADA Expert RCECriticalNoVendor advisory
CVE-2026-49821Rockwell ControlLogix 5580 DoSHighNoVendor advisory
CVE-2026-48192Phoenix Contact FL SWITCH RCECriticalNoVendor advisory
CVE-2026-46801Emerson DeltaV DCS Auth BypassCriticalNoVendor advisory
CVE-2026-43890Yokogawa CENTUM VP HIS RCECriticalNoVendor advisory
CVE-2026-42918ABB Ability System 800xA RCECriticalNoVendor advisory
CVE-2026-40283Honeywell Experion PKS RCECriticalNoVendor advisory
CVE-2026-39182Rockwell Automation FactoryTalk VantagePoint Critical Authentication Bypass Flaw Disclosed by CISA Advisory ICSA-26-280-01CriticalNoVendor advisory
CVE-2026-31940Siemens SIMATIC S7-1500 DoSHighNoVendor advisory
CVE-2026-38411Schneider Modicon M580 RCECriticalNoVendor advisory
CVE-2026-40112JCI EasyIO Neo Auth BypassCriticalNoVendor advisory
CVE-2026-86325Moxa Gateway Stack OverflowCriticalNoVendor advisory
CVE-2026-96587Viidure Dashcam Hardcoded KeysCriticalNoSee remediation
CVE-2026-84411MikroTik RouterOS WebFig RCECriticalNoVendor advisory
CVE-2026-71452JCI EasyIO FS32 RCECriticalNoVendor advisory
CVE-2026-64892JCI EasyIO Neo Cleartext CredsHighNoSee remediation
CVE-2026-55395Teledyne FLIR Hardcoded CredsCriticalNoVendor advisory
CVE-2026-95102Monta EV Charging Missing AuthHighNoSee remediation
CVE-2026-15952ABB PCM600 PrivEscHighNoSee remediation
CVE-2026-94591Armatura One RCECriticalNoSee remediation
CVE-2026-101104Meari IoT Cloud Broken AuthZHighNoSee remediation
CVE-2026-100291Anjvision Command InjectionCriticalNoSee remediation
CVE-2026-104610Tenda GPON ONT RCECriticalNoVendor advisory
CVE-2026-103244ground-station Socket.IO SQLiCriticalNoVendor advisory
CVE-2026-82829Hitachi HCSS Hardcoded CredsCriticalNoVendor advisory
CVE-2026-82827Hitachi HCSS Hardcoded JWT KeyCriticalNoVendor advisory
CVE-2026-96274Baicells Nova 430H DoSHighNoVendor advisory
CVE-2026-14157ASUS Router Format String RCECriticalNoVendor advisory
CVE-2026-75969PTZOptics Firmware Auth BypassCriticalNoVendor advisory
CVE-2026-22755VIVOTEK Camera RCECriticalNoVendor advisory
CVE-2026-84409Lantronix G520 Key LeakHighNoSee remediation
CVE-2026-70356Toptech TMS7 File Upload RCECriticalNoVendor advisory
CVE-2026-13584Mitsubishi CC-Link InjectionHighNoVendor advisory
CVE-2026-51290Rockwell FactoryTalk View RCECriticalNoVendor advisory
CVE-2026-67367Siemens SIMOVE Path TraversalHighNoVendor advisory
CVE-2026-38190Schneider EcoStruxure RCECriticalNoEcoStruxure Operator Terminal Expert v3.5 Hotfix 1
CVE-2026-27875Johnson Controls Simplex LeakHighNov3.03
CVE-2026-57262Siemens LOGO! Hardcoded KeyHighNoV9
CVE-2026-34491Johnson Controls Metasys XSSHighNoVendor advisory
CVE-2025-7639AVEVA SCADA Deserialization RCEHighNoVendor advisory
CVE-2026-93289Eufy Omni Command InjectionCriticalNoVendor advisory
CVE-2026-81861Schneider Electric SCADAPack RTU Secure Lock Flaw Exposes Oil and Gas Telemetry to Tampering CVE-2026-81861MediumNoVendor advisory
CVE-2026-78225Wärtsilä FOS Hardcoded KeysCriticalNoSee remediation
—Siemens SIMATIC IoT2050 Advanced Flaw Enables Unauthenticated Remote Code ExecutionCriticalNoVendor advisory
CVE-2026-9621Rockwell RSLinx Classic CIP DoSHighNoSee remediation
CVE-2026-48921Siemens SIMOVE AGV HijackCriticalNoVendor advisory
ICSA-26-267-02Eufy Omni RTSP Auth BypassCriticalNoVendor advisory
ICSA-26-267-01Botslab G980H Hardcoded CredsCriticalNoVendor advisory
ICSA-26-265-09OpenPLC Runtime v3 OverflowCriticalNoVendor advisory
CVE-2026-89207Siemens WTV676/WTV776 DoSHighNoVendor advisory
CVE-2026-87121lwIP MQTT Out-of-Bounds WriteCriticalNoVendor advisory
CVE-2026-91018lwIP TCP/IP Double FreeHighNoVendor advisory
CVE-2026-50093Siemens Siveillance Upload RCECriticalNoVendor advisory
CVE-2026-88020OpenPLC Runtime Stored XSSHighNoVendor advisory
CVE-2026-88259CareCam CM2507 Missing AuthHighNoSee remediation
CVE-2026-58113Siemens Teamcenter XSSHighNoVendor advisory
CVE-2026-86520Bransys ELD Hardcoded CredsHighNoSee remediation
CVE-2026-9637Rockwell Logix CIP DoSHighNoVendor advisory
CVE-2026-34223Siemens Desigo CC InjectionHighNoVendor advisory
CVE-2026-18963Siemens Edge Mgmt Auth BypassCriticalNoVendor advisory
CVE-2025-6625Schneider Modicon M340 FTP DoSHighNoVendor advisory
CVE-2026-9634Rockwell RMConfigTool PrivEscHighNoSee remediation
CVE-2024-4872Hitachi Energy FACTS RCECriticalNoSee remediation
CVE-2026-8045Schneider EcoStruxure DCE XXEHighNoVendor advisory
CVE-2026-27663Siemens SICAM 8 DoSHighNoVendor advisory
CVE-2026-3869Schneider M580 Auth BypassCriticalNoVendor advisory
CVE-2026-16675Rockwell FactoryTalk PrivEscHighNoVendor advisory
CVE-2026-68070Digital Watchdog VMAX RCECriticalNoSee remediation
—Threat Actors Weaponize AI Tooling and S7comm to Target Siemens S7 Industrial ControllersCriticalNoVendor advisory
CVE-2026-21655Johnson Controls C-CURE RCECriticalNoSee remediation
CVE-2026-15688Mitsubishi GX Works3 BypassCriticalNoVendor advisory
CVE-2026-80465Siemens Mendix SAML BypassCriticalNoVendor advisory
CVE-2026-13336Schneider NetBotz Root RCECriticalNoSee remediation
CVE-2026-13348Schneider PowerChute BypassCriticalNoVendor advisory
CVE-2026-31431ABB Ability Edgenius PrivEscHighNoVendor advisory
CVE-2026-12569PTC Windchill and FlexPLM RCECriticalYesVendor advisory
CVE-2025-67038Lantronix EDS5000 Code InjectionCriticalYesVendor advisory
—Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation CellsCriticalNoVendor advisory
CVE-2023-4346KNX Protocol Lockout DoSHighYesVendor advisory
CVE-2026-81861Schneider SCADAPack Cred LeakHighNoVendor advisory
—Siemens Reyrolle 7SR5 Protection Relay Vulnerabilities Expose Electrical Substations to TamperingCriticalNoVendor advisory
—Industrial OT Defense: Implementing IEC 62443 Security Levels and Purdue Model IsolationCriticalNoVendor advisory
CVE-2026-58190Rockwell Logix CIP InjectionCriticalNoSee remediation
CVE-2026-81821AVEVA Pipeline Heap OverflowHighNoSee remediation
CVE-2026-58240SAP NetWeaver Auth BypassCriticalNoVendor advisory
CVE-2026-67277MikroTik RouterOS Auth BypassCriticalNoSee remediation
CVE-2026-85102Check Point VPN RCECriticalNoSee remediation
CVE-2026-83548SonicWall SMA1000 SSRF ChainCriticalNoSee remediation
CVE-2026-44756SAP Kernel Pre-Auth RCECriticalNoVendor advisory
CVE-2026-0257Palo Alto PAN-OS Auth BypassCriticalNoVendor advisory

KEV: listed in CISA's Known Exploited Vulnerabilities catalog. “No” means not listed when we published, not that the flaw is safe to defer.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

  • Exploited CVEs, with affected products and patch status
  • Patch priorities ranked by real-world exploitation
  • Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issuePrivacy policy