Topic

IEC 62443: news, advisories and analysis

66 articlesUpdated 17 Oct 2026

CyberSecureToday covers IEC 62443 across 66 articles published between 15 Sep 2026 and 17 Oct 2026. The coverage includes 62 vulnerability advisories and 4 analysis or guidance pieces. 61 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on IEC 62443 most often intersect with SCADA, Industrial OT and Siemens, with Industrial, OT & IoT the most affected sector. The most recent story, “Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization”, was published 17 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

ThreatsIndustrial & OTCritical
Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization
CISA Advisory ICSA-26-288-01 warns of critical vulnerabilities in Eclipse Milo OPC UA stacks that allow low-privileged actors to bypass method authorization and crash OT gateways.
Mei-Lin Chen17 Oct 20269 min read
ThreatsIndustrial & OTCritical
Thermo Fisher Torrent Suite Flaws Expose Genomic Sequencing Labs to Authentication Bypass
CISA Advisory ICSMA-26-288-01 warns of critical authentication bypass and execution vulnerabilities in Thermo Fisher Torrent Suite software used in clinical genomic sequencing.
CST Editorial Desk17 Oct 20269 min read
ThreatsIndustrial & OTCritical
ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA Networks
Critical infrastructure vulnerability advisory issued by CISA ICS-CERT impacting industrial automation systems and IEC 62443 security boundaries.
CST Editorial Desk16 Oct 20267 min read
NewsIndustrial & OTCritical
Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros
Yokogawa Electric releases critical patches for CENTUM VP Human Interface Station software addressing a remote code execution vulnerability in graphics macros.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTHigh
Siemens SIMATIC S7-1500 PLC Vulnerability Enables Unauthenticated PROFINET DCP Network Parameter Tampering (CVE-2026-79880)
Siemens issues urgent firmware updates for SIMATIC S7-1500 industrial controllers to remediate an unauthenticated PROFINET DCP configuration tampering vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
ABB System 800xA Flaw Allows Recipe Injection in Chemical and Pharma Plants
ABB releases emergency advisories for System 800xA Batch Management software after researchers uncover an unauthenticated recipe injection vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
GE Vernova Mark VIe Flaw Allows Unauthenticated Packet Injection and Turbine Trips
GE Vernova issues an emergency advisory for Mark VIe DCS controllers (CVE-2026-79220, CVSS 9.6) resolving an unauthenticated Ethernet Global Data injection defect.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Honeywell MasterLogic-200 PLC Ethernet Module Vulnerability Enables Unauthenticated Memory Overwrite and Controller Takeover (CVE-2026-79110)
Honeywell releases emergency firmware for MasterLogic-200 PLCs (CVE-2026-79110, CVSS 9.4) addressing an unauthenticated Ethernet stack buffer overflow.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Phoenix Contact ILC Inline Modular Controller Vulnerability Enables Unauthenticated PROFINET Protocol Memory Corruption (CVE-2026-78950)
Phoenix Contact issues an emergency advisory for Inline Modular Controllers (CVE-2026-78950, CVSS 9.5) fixing a critical PROFINET stack buffer overflow.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC-Q PLC Vulnerability Enables Unauthenticated Memory Corruption via SLMP Protocol Injection (CVE-2026-78820)
Mitsubishi Electric issues an emergency advisory for MELSEC-Q PLCs (CVE-2026-78820, CVSS 9.3) resolving an unauthenticated SLMP protocol injection flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Schneider Electric Foxboro DCS Flaw Allows Unauthenticated Fieldbus Module Memory Corruption (CVE-2026-77880)
Schneider Electric releases emergency fixes for Foxboro DCS Fieldbus Modules (CVE-2026-77880, CVSS 9.6) resolving a critical memory corruption flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SIMATIC Energy Manager PRO Flaw Enables Unauthenticated Remote Code Execution
Siemens issues emergency updates for SIMATIC Energy Manager PRO (CVE-2026-76880, CVSS 9.8) resolving an unauthenticated OPC UA deserialization vulnerability.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC iQ-F PLC Flaw Enables Memory Overwrite and Axis Stoppage
Mitsubishi Electric and CISA disclose advisory for MELSEC iQ-F compact PLCs, patching a critical Modbus RTU communication buffer overflow (CVE-2026-75890).
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Delta Electronics CNC HMI Flaw Allows Remote Unauthenticated G-Code Toolpath Manipulation and Spindle Override (CVE-2026-74810)
Delta Electronics and CISA issue advisory for CNC HMI controllers, patching a critical memory corruption flaw (CVE-2026-74810) allowing remote toolpath tampering.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Yokogawa CENTUM VP Flaw Lets Malformed Vnet/IP Packets Force Controller Restarts
Yokogawa releases security advisory YSAR-26-0004 for CENTUM VP Field Control Stations, patching a critical Vnet/IP communication flaw (CVE-2026-72840).
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
ABB Ability System 800xA Batch Management Server Flaw Enables Unauthenticated Recipe Parameter Manipulation (CVE-2026-71880)
ABB and CISA issue advisory for Ability System 800xA Batch Management, patching a critical flaw (CVE-2026-71880) allowing unauthenticated recipe tampering.
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Rockwell ControlLogix 5580 CIP Flaw Allows Unauthenticated Denial of Service
Rockwell Automation and CISA release advisory for ControlLogix 5580 controllers, patching a critical CIP protocol memory stride overflow (CVE-2026-70820).
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Emerson Ovation DCS Flaw Enables Logic Injection in Power Generation Networks
Emerson discloses critical vulnerability CVE-2026-69880 in Ovation Distributed Control System OCR400 controllers allowing remote code execution and turbine control logic tampering.
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SCALANCE Switch Flaw Allows Unauthenticated Remote Firmware Manipulation
Siemens issues critical ProductCERT advisory for SCALANCE X industrial switches where a cryptographic verification bypass allows remote unsigned firmware injection.
CST Editorial Desk11 Oct 20268 min read
ThreatsIndustrial & OTCritical
Schneider Electric Modicon M580 Ethernet Communication Module Flaw Enables Remote Controller Takeover
A critical buffer overflow in Schneider Electric Modicon M580 and M340 Ethernet communication modules enables unauthenticated remote code execution.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Phoenix Contact FL SWITCH 3000 and 4000 Series Industrial Switches Vulnerable to SNMP Memory Corruption
A critical memory corruption flaw in Phoenix Contact FL SWITCH 3000 and 4000 managed industrial Ethernet switches enables remote arbitrary code execution.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Siemens SIMATIC S7-1500 Web Server Overflow Opens Controllers to Remote Disruption
A critical buffer overflow in the integrated HTTPS web server of Siemens SIMATIC S7-1500 and S7-1200 CPU firmware enables remote disruption of industrial automation controllers.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Yokogawa CENTUM VP FCS Controller Memory Corruption Flaw Enables Safety Setpoint Manipulation
A critical memory corruption vulnerability in Yokogawa CENTUM VP Field Control Station (FCS) controllers allows unauthenticated network packets to manipulate industrial control setpoints.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTHigh
Mitsubishi Electric MELSEC iQ-R Series PLCs Vulnerable to Unauthenticated Industrial Network Memory Tampering (CVE-2026-59820)
Mitsubishi Electric and CISA warn of a high-severity flaw in MELSEC iQ-R controllers allowing remote network adversaries to alter device memory registers without authentication.
CST Editorial Desk9 Oct 20268 min read