Do Son A C-CURE 9000 vulnerability chain hits CVSS 9.6. CVE-2026-21655 allows remote code execution on Johnson Controls victor application servers.
ICS Advisory
A Panduit IntraVUE vulnerability tracked as CVE-2026-42933 scores CVSS 10. Five flaws let attackers cross OT segmentation and steal credentials.
CISA flags an AVer PTC camera flaw, CVE-2026-40624, enabling remote code execution. The CVSS 9.8 RCE bug affects four PTC models.