Topic

Industrial OT: news, advisories and analysis

26 articlesUpdated 13 Oct 2026

CyberSecureToday covers Industrial OT across 26 articles published between 18 Sep 2026 and 13 Oct 2026. The coverage includes 26 vulnerability advisories. 25 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Industrial OT most often intersect with IEC 62443, SCADA and SCADA Security, with Industrial, OT & IoT the most affected sector. The most recent story, “Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

NewsIndustrial & OTCritical
Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros
Yokogawa Electric releases critical patches for CENTUM VP Human Interface Station software addressing a remote code execution vulnerability in graphics macros.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTHigh
Siemens SIMATIC S7-1500 PLC Vulnerability Enables Unauthenticated PROFINET DCP Network Parameter Tampering (CVE-2026-79880)
Siemens issues urgent firmware updates for SIMATIC S7-1500 industrial controllers to remediate an unauthenticated PROFINET DCP configuration tampering vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
ABB System 800xA Flaw Allows Recipe Injection in Chemical and Pharma Plants
ABB releases emergency advisories for System 800xA Batch Management software after researchers uncover an unauthenticated recipe injection vulnerability.
CST Editorial Desk13 Oct 20268 min read
$Rugged DIN-rail industrial protocol gateway device inside an electrical substation with holographic SCADA protocols fracturing under memory buffer corruption$
ThreatsIndustrial & OTCritical
Stack Buffer Overflow in Moxa Industrial Protocol Gateways Enables Remote Device Compromise (CVE-2026-86325)
A critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
Daniel Okafor2 Oct 20268 min read
ThreatsIndustrial & OTCritical
Johnson Controls EasyIO FS32 Automation Servers Vulnerable to Unauthenticated OS Command Injection (CVE-2026-71452)
A critical OS command injection vulnerability in Johnson Controls EasyIO FS32 controllers allows network attackers to gain root access and hijack HVAC control logic.
Daniel Okafor2 Oct 20269 min read
ThreatsIndustrial & OTHigh
Johnson Controls EasyIO Neo Edge Controllers Vulnerable to Cleartext Credential Interception and Data Disclosure (CVE-2026-64892)
CISA advisories ICSA-26-274-04 and ICSA-26-274-05 warn of cleartext credential and session disclosure in Johnson Controls EasyIO Neo building controllers.
CST Editorial Desk2 Oct 20268 min read
ThreatsIndustrial & OTCritical
Armatura One Physical Access Control Platform Crippled by Embedded Broker Deserialization and Static Secrets (CVE-2026-94591)
CISA advisory ICSA-26-274-01 warns of embedded ActiveMQ deserialization and hardcoded AES keys in Armatura One, enabling physical security facility takeover.
CST Editorial Desk2 Oct 20269 min read
ThreatsIndustrial & OTCritical
Anjvision Industrial Video Streaming Transcoders Compromised by Critical Unauthenticated Command Injection (CVE-2026-100291)
CISA advisory ICSA-26-272-05 exposes critical unauthenticated command injection and credential disclosure vulnerabilities across Anjvision streaming transcoders.
CST Editorial Desk1 Oct 20269 min read
ThreatsIndustrial & OTCritical
Hitachi Industrial Systems Undocumented Administrative Backdoor and Static Credentials Exposed in Production (CVE-2026-82829)
Undocumented backdoor maintenance accounts and hardcoded credentials in Hitachi Coding Software Suite through v3.3.0 permit unauthorized full system access.
CST Editorial Desk1 Oct 202611 min read
ThreatsIndustrial & OTCritical
Hitachi Coding Software Suite Hardcoded JWT Key Enables Industrial Marking System Takeover
A hardcoded JWT signing key in Hitachi Coding Software Suite through v3.3.0 allows unauthenticated attackers to forge admin tokens and hijack factory lines.
CST Editorial Desk1 Oct 202612 min read
ThreatsIndustrial & OTCritical
VIVOTEK Network Camera Firmware Vulnerability Enables Unauthenticated Remote Command Execution (CVE-2026-22755)
CISA issues ICSA-26-272-03 warning of a critical command injection flaw in VIVOTEK industrial camera firmware enabling physical security stream hijacking.
Mei-Lin Chen1 Oct 202610 min read
ThreatsIndustrial & OTHigh
Siemens LOGO! Soft Comfort Hardcoded Encryption Key Exposes Industrial PLC Project Files CVE-2026-57262
CISA Advisory ICSA-26-225-13 warns of hardcoded encryption keys and unsalted password hashes in Siemens LOGO! Soft Comfort engineering software.
Mei-Lin Chen27 Sep 20268 min read
ThreatsIndustrial & OTHigh
AVEVA Enterprise SCADA Insecure Deserialization Flaw Enables Arbitrary Code Execution CVE-2025-7639
CISA ICS Advisory ICSA-26-225-01 warns of an unsafe deserialization flaw in AVEVA Enterprise SCADA systems allowing remote code execution on critical control nodes.
Mei-Lin Chen27 Sep 20268 min read
ThreatsIndustrial & OT
Schneider Electric SCADAPack RTU Secure Lock Flaw Exposes Oil and Gas Telemetry to Tampering CVE-2026-81861
CISA issues advisory ICSA-26-258-04 warning of credential protection flaw CVE-2026-81861 in Schneider Electric SCADAPack RTUs managing critical pipeline infrastructure.
CST Editorial Desk26 Sep 202614 min read
ThreatsIndustrial & OTCritical
Wärtsilä FOS-Onboard Hardcoded Key Flaws Expose Vessel Fleets to Remote Takeover
CISA issues advisory ICSA-26-258-02 for critical hardcoded cryptographic key flaws in Wärtsilä FOS-Onboard, allowing remote attackers to hijack navigation systems.
CST Editorial Desk26 Sep 202615 min read
ThreatsIndustrial & OTHigh
Rockwell Automation RSLinx Classic CIP Flaws Enable Remote Denial of Service
CISA and Rockwell Automation disclose multiple CIP packet parsing flaws in RSLinx Classic (ICSA-26-244-01), enabling attackers to crash industrial SCADA communication gateways.
Mei-Lin Chen25 Sep 202617 min read
ThreatsIndustrial & OTHigh
Siemens Building Energy Gateway Flaw Enables Denial of Service in Smart Facilities
CISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
CST Editorial Desk24 Sep 202615 min read
ThreatsIndustrial & OTHigh
Schneider Electric Modicon M340 FTP Flaw Enables Remote Denial of Service
CISA and Schneider Electric issue advisory for CVE-2025-6625 in Modicon M340 PLCs and BMX communication modules, where malformed FTP commands halt controller operations.
Daniel Okafor21 Sep 202614 min read
ThreatsIndustrial & OTHigh
Siemens SICAM 8 Remote Parameterization Resource Exhaustion Flaw Disables Substation Automation Controllers
Siemens releases advisory SSA-246443 for high-severity flaw CVE-2026-27663 in SICAM 8 controllers, where resource exhaustion halts substation automation.
CST Editorial Desk20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Schneider Electric Modicon M580 Authentication Flaw Risks Industrial Process Takeover
Schneider Electric issues advisory SEVD-2026-251-04 for critical CVSS 9.2 flaw CVE-2026-3869 in Modicon M580 controllers enabling unauthenticated process takeover.
CST Editorial Desk20 Sep 202615 min read
ThreatsIndustrial & OTHigh
Rockwell Automation FactoryTalk Activation Manager Flaw Enables Local SYSTEM Privilege Escalation
Rockwell Automation issues advisory SD1799 for CVE-2026-16675 in FactoryTalk Activation Manager, allowing authenticated operators to seize SYSTEM privileges.
CST Editorial Desk20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Schneider Electric NetBotz Command Injection Flaw Allows Root System Compromise via Malicious Backups
Schneider Electric and CISA warn of critical OS command injection flaw CVE-2026-13336 in NetBotz 5 environmental monitors enabling root host takeover via system backup restore.
CST Editorial Desk19 Sep 202610 min read
ThreatsIndustrial & OTCritical
Schneider Electric PowerChute Authentication Flaw Leaves Enterprise UPS Systems Vulnerable to Remote Shutdown
Schneider Electric and CISA warn of improper authentication validation in PowerChute Serial Shutdown allowing unauthorized actors to disrupt critical infrastructure power.
Priya Raman19 Sep 20269 min read
ThreatsIndustrial & OTCritical
Lantronix EDS5000 Industrial Device Servers Hit by Critical Remote Code Injection Flaw
CISA adds Lantronix EDS5000 industrial serial device server vulnerability CVE-2025-67038 to KEV catalog following active exploitation against OT networks.
Tom Verhoeven18 Sep 202610 min read