Topic

ICS-CERT: news, advisories and analysis

19 articlesUpdated 9 Oct 2026

CyberSecureToday covers ICS-CERT across 19 articles published between 14 Sep 2026 and 9 Oct 2026. The coverage includes 19 vulnerability advisories. 19 advisories are rated critical or high severity.

Stories on ICS-CERT most often intersect with SCADA, IEC 62443 and PLC, with Industrial, OT & IoT the most affected sector. The most recent story, “Rockwell FactoryTalk View SE Flaw Allows Remote Authentication Bypass and Console Takeover”, was published 9 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

ThreatsIndustrial & OTCritical
Rockwell FactoryTalk View SE Flaw Allows Remote Authentication Bypass and Console Takeover
Rockwell Automation and CISA disclose a critical vulnerability in FactoryTalk View SE human-machine interface software allowing unauthenticated operators to bypass security.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
Mitsubishi Electric MELSEC iQ-R Series PLCs Vulnerable to Unauthenticated Industrial Network Memory Tampering (CVE-2026-59820)
Mitsubishi Electric and CISA warn of a high-severity flaw in MELSEC iQ-R controllers allowing remote network adversaries to alter device memory registers without authentication.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTCritical
ABB Ability Symphony Plus SCADA S+ Operations Insecure Deserialization Vulnerability Enables Remote Code Execution (CVE-2026-58902)
ABB Cybersecurity and CISA disclose a critical vulnerability in Symphony Plus S+ Operations SCADA software allowing unauthenticated remote code execution on power plant servers.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
GE Vernova Mark VIe Distributed Control System Controllers Vulnerable to Industrial Network Packet Flooding (CVE-2026-57812)
GE Vernova and CISA issue industrial security advisories for Mark VIe and Mark VIeS safety systems addressing a flaw causing turbine controller communication lockup.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTCritical
Yokogawa FAST/TOOLS SCADA Gateway Buffer Overflow Vulnerability Enables Remote Industrial Process Disruption (CVE-2026-56891)
Yokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
Schneider Electric Modicon M580 Ethernet Modules Vulnerable to Unauthenticated Malformed Packet Denial-of-Service (CVE-2026-55829)
Schneider Electric and CISA warn of a critical vulnerability in Modicon M580 communication modules allowing remote attackers to trigger unrecoverable PLC controller halts.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
AVEVA System Platform InTouch OPC Server Local Privilege Escalation Enables Industrial Operator Workstation Compromise (CVE-2026-54890)
AVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
CST Editorial Desk8 Oct 20268 min read
ThreatsIndustrial & OTHigh
Omron Sysmac NJ/NX Series Machine Automation Controllers Vulnerable to EtherNet/IP CIP Session Hijacking (CVE-2026-53891)
Omron and JPCERT/CC issue security advisories detailing an unauthenticated session hijacking flaw in Sysmac NJ and NX controllers exposing industrial motion controls.
CST Editorial Desk8 Oct 20268 min read
ThreatsIndustrial & OTCritical
Honeywell Trend Controls IQ4 Building Controllers Vulnerable to Unsigned Firmware Memory Manipulation (CVE-2026-52873)
Critical firmware flaw in Honeywell Trend Controls IQ4 building management controllers allows remote network actors to deploy modified firmware images and seize HVAC control.
CST Editorial Desk8 Oct 20268 min read
ThreatsIndustrial & OTCritical
Siemens SIMATIC WinCC OA SCADA Authentication Bypass Enables Unauthenticated Industrial Telemetry Tampering (CVE-2026-51982)
Siemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.
CST Editorial Desk8 Oct 20268 min read
ThreatsIndustrial & OTCritical
Siemens SIMOVE Fleetmanager Flaws Enable Remote Trajectory Hijacking of Factory AGVs
Siemens fixes critical vulnerabilities in SIMOVE Fleetmanager and SIPLANT, preventing unauthenticated remote threat actors from altering autonomous factory AGV paths.
CST Editorial Desk25 Sep 202616 min read
ThreatsIndustrial & OTCritical
Eufy Facility Robots Vulnerable to Remote Video Interception and Fleet Takeover
CISA ICS advisory ICSA-26-267-02 warns of critical vulnerabilities in Eufy autonomous commercial cleaning robots, allowing remote RTSP stream hijack and LiDAR map exfiltration.
CST Editorial Desk25 Sep 202616 min read
ThreatsIndustrial & OTCritical
Botslab Dashcam Flaws Expose Commercial Fleet Telematics to Remote Video Hijacking
CISA ICS advisory ICSA-26-267-01 details critical flaws in Botslab G980H dashcams, allowing remote attackers to intercept live video and hijack fleet telematics.
Daniel Okafor25 Sep 202616 min read
ThreatsIndustrial & OTCritical
OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsIndustrial & OTHigh
ABB Ability Edgenius Industrial Edge Controllers Exposed to Container Root Escalation Flaw
ABB and CISA issue security advisory for CVE-2026-31431 in Ability Edgenius edge controllers enabling container breakout and local root takeover.
Mei-Lin Chen19 Sep 20269 min read
ThreatsIndustrial & OTCritical
Industrial OT Defense: Implementing IEC 62443 Security Levels and Purdue Model Isolation
CISA ICS-CERT advisory ICSA-26-258-01 prompts urgent implementation of IEC 62443-3-2 zone segmentation and Purdue Model controls in industrial networks.
Daniel Okafor16 Sep 202611 min read
ThreatsIndustrial & OTCritical
Rockwell Automation Logix Controllers Exposed to Critical Remote Firmware Tampering Flaws
CISA alerted industrial manufacturing operators to severe vulnerabilities in Rockwell Automation Logix controllers and 1756 communication modules allowing PLC tampering.
Mei-Lin Chen14 Sep 20267 min read
ThreatsEnergy & UtilitiesHigh
AVEVA Pipeline Integrity Monitor Vulnerabilities Threaten Critical Energy Infrastructure
CISA issued an energy sector ICS advisory warning of memory corruption and authentication defects in AVEVA Pipeline Integrity Monitor supervising oil and gas transport.
Daniel Okafor14 Sep 20268 min read
ThreatsHealthcare & PharmaCritical
NextGen Mirth Connect Critical RCE Flaws Expose Healthcare HL7 Data Pipelines
CISA published an urgent medical ICS advisory detailing critical RCE vulnerabilities in NextGen Mirth Connect integration engines routing hospital clinical records.
Priya Raman14 Sep 20268 min read