Correction: CISA Releases 20 Industrial Control Systems Advisories
Cybersecurity and Infrastructure Security Agency sent this bulletin at 10/22/2026 04:07 PM EDT
You are subscribed to Reducing the Significant Risk of Known Exploited Vulnerabilities for Cybersecurity and Infrastructure Security Agency. This information has recently been updated and is now available.
Please disregard the previous email sent to this distribution list.
The previous message incorrectly stated that 20 vulnerabilities had been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog. No vulnerabilities have been added to the KEV Catalog as part of this release.
CISA has released 20 Industrial Control Systems (ICS) Advisories. These advisories provide timely information on current security issues, vulnerabilities, and exploits affecting ICS environments.
- ICSMA-26-295-01 - InterSystems Corporation InterSystems IRIS for Health
- ICSA-26-295-01 - Kiloview E3 NDI Encoder
- ICSA-26-295-02 - Siemens Industrial Edge App Publisher
- ICSA-26-295-03 - Siemens Software Center
- ICSA-26-295-04 - Siemens Capital Embedded AR Classic
- ICSA-26-295-05 - Siemens SENTRON 3NA COM Fuse
- ICSA-26-295-06 - Siemens PSS(R)SINCAL
- ICSA-26-295-07 - Siemens SIMATIC IPCs
- ICSA-26-295-08 - Siemens APOGEE, TALON and Desigo PXC/PXM Products
- ICSA-26-295-09 - Siemens Industrial Edge Device Kit
- ICSA-26-295-10 - Siemens SIMATIC S7 Webserver API
- ICSA-26-295-11 - Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
- ICSA-26-295-12 - Siemens RUGGEDCOM CROSSBOW
- ICSA-26-295-13 - Siemens WinCC
- ICSA-26-295-14 - Siemens SIMATIC S7 PLCs Web Server
- ICSA-26-295-15 - Siemens RUGGEDCOM CROSSBOW Station Access Controller
- ICSA-26-295-16 - Siemens SIMATIC S7-1500 TM MFP
- ICSA-26-295-17 - Siemens Industrial Edge Devices
- ICSA-26-295-18 - Siemens RUGGEDCOM APE1808 Devices
- ICSA-26-274-06 - Meari IoT Cloud Platform OpenAPI Service (Update A)
CISA encourages users and administrators to review these ICS Advisories for technical details and mitigations.