CISA ICS advisory digest
The latest 30 advisories from CISA's ICS advisories feed, fetched 28 Oct 2026. A secondary section of the briefing — our focus is governance — but useful for spotting vendors in your estate. Always read the full CISA advisory.
| Published | Advisory | Vendor | CVSS | Sectors | Summary |
|---|---|---|---|---|---|
| 27 Oct 2026 | ICSA-26-300-02 Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz |
Mitsubishi Electric | 9.1 v3 |
Critical Manufacturing | Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations... 3 vulnerabilities: CVE-2023-4863, CVE-2026-16436, CVE-2026-16437 +1 |
| 27 Oct 2026 | ICSA-26-300-01 EPICS Base |
The EPICS Community | 9.8 v3 |
Critical Manufacturing | Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. 3 vulnerabilities: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597 +1 |
| 22 Oct 2026 | ICSA-26-295-03 Siemens Software Center |
Siemens | 6.7 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application... 1 vulnerability: CVE-2026-110936 |
| 22 Oct 2026 | ICSA-26-295-01 Kiloview E3 NDI Encoder |
Kiloview | 9.9 v3 |
Communications, Information Technology | Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. 6 vulnerabilities: CVE-2026-109122, CVE-2026-111100, CVE-2026-96616 +6 |
| 22 Oct 2026 | ICSA-26-295-02 Siemens Industrial Edge App Publisher |
Siemens | 8.3 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on... 2 vulnerabilities: CVE-2026-78556, CVE-2026-78557 |
| 22 Oct 2026 | ICSA-26-295-04 Siemens Capital Embedded AR Classic |
Siemens | 5.3 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital... 1 vulnerability: CVE-2026-89208 |
| 22 Oct 2026 | ICSA-26-295-05 Siemens SENTRON 3NA COM Fuse |
Siemens | 5.8 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may... 1 vulnerability: CVE-2024-7322 |
| 22 Oct 2026 | ICSA-26-295-06 Siemens PSS(R)SINCAL |
Siemens | – | Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This... 1 vulnerability: CVE-2026-84854 |
| 22 Oct 2026 | ICSA-26-295-07 Siemens SIMATIC IPCs |
Siemens | 7.7 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is... 1 vulnerability: CVE-2026-72895 |
| 22 Oct 2026 | ICSA-26-295-08 Siemens APOGEE, TALON and Desigo PXC/PXM Products |
Siemens | 8.2 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for... 3 vulnerabilities: CVE-2026-102073, CVE-2026-102074, CVE-2026-102075 +2 |
| 22 Oct 2026 | ICSA-26-295-09 Siemens Industrial Edge Device Kit |
Siemens | 9.1 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple... 1 vulnerability: CVE-2026-44414, CVE-2026-44415 |
| 22 Oct 2026 | ICSA-26-295-12 Siemens RUGGEDCOM CROSSBOW |
Siemens | 8.8 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and... 4 vulnerabilities: CVE-2026-89196, CVE-2026-89197, CVE-2026-89198 +8 |
| 22 Oct 2026 | ICSA-26-295-13 Siemens WinCC |
Siemens | 8.8 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens... 1 vulnerability: CVE-2026-59241 |
| 22 Oct 2026 | ICSA-26-295-14 Siemens SIMATIC S7 PLCs Web Server |
Siemens | 9.6 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of... 2 vulnerabilities: CVE-2026-63350, CVE-2026-63351, CVE-2026-63352 +5 |
| 22 Oct 2026 | ICSA-26-295-15 Siemens RUGGEDCOM CROSSBOW Station Access Controller |
Siemens | 9.8 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain... 4 vulnerabilities: CVE-2025-6965, CVE-2025-70873, CVE-2025-71316 +2 |
| 22 Oct 2026 | ICSA-26-295-17 Siemens Industrial Edge Devices |
Siemens | 9.1 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for... 1 vulnerability: CVE-2026-44414, CVE-2026-44415 |
| 22 Oct 2026 | ICSA-26-295-18 Siemens RUGGEDCOM APE1808 Devices |
Siemens | 7.5 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer... 4 vulnerabilities: CVE-2026-33387, CVE-2026-33388, CVE-2026-33389 +2 |
| 22 Oct 2026 | ICSA-26-295-16 Siemens SIMATIC S7-1500 TM MFP |
Siemens | – | Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or... 377 vulnerabilities: CVE-2023-52927, CVE-2023-53292, CVE-2023-54271 +374 |
| 22 Oct 2026 | ICSA-26-295-11 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP |
Siemens | – | Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and... 428 vulnerabilities: CVE-2021-41617, CVE-2023-28531, CVE-2023-51384 +425 |
| 22 Oct 2026 | ICSA-26-295-10 Siemens SIMATIC S7 Webserver API |
Siemens | 7.5 v3 |
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities | .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens... 2 vulnerabilities: CVE-2026-85114, CVE-2026-85115 |
| 20 Oct 2026 | ICSA-26-293-03 Moxa AIG-302 ThingsPro Edge |
Moxa | 8.1 v3 |
Critical Manufacturing, Energy, Water and Wastewater Systems | Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information. 2 vulnerabilities: CVE-2026-109812, CVE-2026-109813 |
| 20 Oct 2026 | ICSA-26-293-01 HMS Networks PEAK-System PCAN Windows drivers |
HMS Networks | 7.1 v3 |
Transportation Systems, Healthcare and Public Health, Energy, Critical Manufacturing | Successful exploitation of these vulnerabilities could crash the Windows kernel. 5 vulnerabilities: CVE-2026-109576, CVE-2026-101103, CVE-2026-94188 +3 |
| 20 Oct 2026 | ICSA-26-293-05 Hitachi Energy RTU500 Product |
Hitachi Energy | 8.8 v3 |
Energy | Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product.... 7 vulnerabilities: CVE-2026-17539, CVE-2026-28388, CVE-2026-6732 +6 |
| 20 Oct 2026 | ICSA-26-293-04 Hitachi Energy MicroSCADA X SYS600 Product |
Hitachi Energy | 7.8 v3 |
Energy | Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please... 2 vulnerabilities: CVE-2026-9852, CVE-2026-9853, CVE-2026-9854 |
| 15 Oct 2026 | ICSA-26-280-01 CISA Malcolm |
CISA | 8.1 v3 |
Energy, Information Technology, Water and Wastewater Systems | View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side... 6 vulnerabilities: CVE-2026-107336, CVE-2026-107333, CVE-2026-107362 +4 |
| 15 Oct 2026 | ICSA-26-288-02 Guangzhou Juan IoT Technology EseeCloud |
— | 9.8 v3 |
Energy, Communications, Transportation Systems, Financial Services, Government Services and Facilities | Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. 3 vulnerabilities: CVE-2026-107617, CVE-2026-97858, CVE-2026-105664 |
| 15 Oct 2026 | ICSA-26-288-01 Eclipse Foundation Eclipse Milo |
Eclipse Foundation | 8.2 v3 |
Chemical, Critical Manufacturing, Energy, Water and Wastewater | Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. 5 vulnerabilities: CVE-2026-62927, CVE-2026-63252, CVE-2026-58080 +3 |
| 13 Oct 2026 | ICSA-26-286-01 Inductive Automation Ignition Software |
Inductive Automation | 8.8 v3 |
Critical Manufacturing, Energy, Information Technology | Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. 1 vulnerability: CVE-2026-92817 |
| 13 Oct 2026 | ICSA-26-286-02 Swann Communications SWIFI-SE2KIC |
Swann Communications | 6.2 v3 |
Commercial Facilities | Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. 1 vulnerability: CVE-2026-107605, CVE-2026-107606, CVE-2026-107607 |
| 8 Oct 2026 | ICSA-26-281-02 Grid Protection Alliance openPDC and openHistorian |
Grid Protection Alliance | 9.8 v3 |
Energy | View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC openPDC (Docker image) openHistorian CVSS Vendor Equipment v3 9.8 Grid Protection Alliance openPDC 5... 5 vulnerabilities: CVE-2026-100730, CVE-2026-105281, CVE-2026-85479 +3 |
Source: CISA, U.S. Government work. Vendor names are parsed automatically from the advisory and may be incomplete.