ICS security Archives • Daily CyberSecurity

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk Moxa MGate vulnerabilities CVE-2026-86325 and CVE-2026-86326 in MGate protocol gateway firmware

Moxa MGate vulnerabilities CVE-2026-86325 and CVE-2026-86326 in MGate protocol gateway firmware

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

Do Son October 2, 2026

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4...

Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs Apache PLC4X vulnerability CVE-2026-102508 in the OPC UA driver allowing server impersonation and credential theft

Apache PLC4X vulnerability CVE-2026-102508 in the OPC UA driver allowing server impersonation and credential theft

Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs

Do Son September 30, 2026

TL;DR The Apache Software Foundation disclosed CVE-2026-102508, a critical Apache PLC4X vulnerability in its OPC UA driver,...

CISA Warns of 10 Toptech TMS7 and TopHAT Vulnerabilities, One Rated CVSS 10.0 Toptech TMS7 vulnerabilities in the CISA ICS advisory, including CVSS 10.0 flaw CVE-2026-71379 affecting TMS7 and TopHAT terminal management systems

Toptech TMS7 vulnerabilities in the CISA ICS advisory, including CVSS 10.0 flaw CVE-2026-71379 affecting TMS7 and TopHAT terminal management systems

CISA Warns of 10 Toptech TMS7 and TopHAT Vulnerabilities, One Rated CVSS 10.0

Do Son September 29, 2026

TL;DR CISA published advisory ICSA-26-272-02 on September 29, 2026, covering 10 Toptech TMS7 vulnerabilities that also affect...

Critical Siemens Vulnerabilities Hit Industrial Edge and OIS Siemens vulnerabilities advisory dashboard showing CVE-2026-18963 authentication bypass and CVE-2026-50093 file upload flaws

Siemens vulnerabilities advisory dashboard showing CVE-2026-18963 authentication bypass and CVE-2026-50093 file upload flaws

Critical Siemens Vulnerabilities Hit Industrial Edge and OIS

Do Son September 9, 2026

Siemens ProductCERT disclosed two critical Siemens vulnerabilities on September 8, 2026. One allows full account takeover in...

CVE-2026-78319: SAUTER Controller RCE Flaw Disclosed SAUTER building controller vulnerability CVE-2026-78319 TOCTOU remote code execution advisory diagram

SAUTER building controller vulnerability CVE-2026-78319 TOCTOU remote code execution advisory diagram

CVE-2026-78319: SAUTER Controller RCE Flaw Disclosed

Do Son September 1, 2026

TL;DR CERT@VDE published full details of CVE-2026-78319 on September 1, 2026. This SAUTER building controller vulnerability lets...

Ebyte NE2-D11 Gateway Hit by 11 Vulnerabilities, No Patch Yet Ebyte NE2-D11 vulnerabilities in industrial gateway web interface, CISA ICS advisory authentication bypass CVE-2026-73125

Ebyte NE2-D11 vulnerabilities in industrial gateway web interface, CISA ICS advisory authentication bypass CVE-2026-73125

Ebyte NE2-D11 Gateway Hit by 11 Vulnerabilities, No Patch Yet

Do Son August 26, 2026

TL;DR CISA disclosed 11 Ebyte NE2-D11 vulnerabilities on August 25, 2026. Four carry a critical 9.8 CVSS...

CVE-2026-14950 (CVSS 9.8): Frauscher FDS102 Flaw Enables Unauthorized Continued Access Frauscher FDS102 vulnerabilities CVE-2026-14950 unauthorized continued access railway diagram

Frauscher FDS102 vulnerabilities CVE-2026-14950 unauthorized continued access railway diagram

CVE-2026-14950 (CVSS 9.8): Frauscher FDS102 Flaw Enables Unauthorized Continued Access

Do Son August 20, 2026

TL;DR Frauscher patched eight flaws in its FDS102 railway diagnostic system on August 20, 2026. The most...

US Agencies Warn of AI-Generated Exploits Targeting Siemens S7 PLCs Siemens PLC cyber threat with AI-generated exploit scripts targeting S7 series controllers in critical infrastructure

Siemens PLC cyber threat with AI-generated exploit scripts targeting S7 series controllers in critical infrastructure

US Agencies Warn of AI-Generated Exploits Targeting Siemens S7 PLCs

Do Son August 19, 2026

WarnAt a glance Actor / group Unattributed threat actors (no group named in this advisory) Activity type...

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext

Do Son August 14, 2026

TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets...

CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050 CVE-2026-58115 SIMATIC IoT2050 Node-RED remote code execution flaw with a CVSS 10 severity score

CVE-2026-58115 SIMATIC IoT2050 Node-RED remote code execution flaw with a CVSS 10 severity score

CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050

Do Son August 12, 2026

TL;DR Siemens has disclosed CVE-2026-58115, a maximum-severity flaw in SIMATIC IoT2050 Advanced devices. The bug scores a...

Phoenix Contact CHARX vulnerabilities affecting EV charging controller firmware

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Do Son August 6, 2026

TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...

WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise WAGO System I/O field device early-boot flaw CVE-2026-4769 full system compromise

WAGO System I/O field device early-boot flaw CVE-2026-4769 full system compromise

WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise

Do Son July 13, 2026

TL;DR A critical flaw in WAGO System I/O field devices now has a fix. Tracked as CVE-2026-4769,...

iba deserialization vulnerability enabling remote code execution in ibaPDA and ibaDatCoordinator (CVE-2026-8024)

Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)

Do Son June 19, 2026

Unauthenticated RCE hits iba industrial software A critical iba deserialization vulnerability could let remote attackers run arbitrary...

Rockwell Automation patches multiple ICS flaws Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters

Rockwell Automation vulnerabilities in FactoryTalk Historian and FLEX I/O EtherNet/IP adapters

Rockwell Automation patches multiple ICS flaws

Do Son June 19, 2026

Rockwell Automation has disclosed two security advisories that reveal several Rockwell Automation vulnerabilities across its industrial product...

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829) Moxa NPort vulnerability CVE-2026-10829 stack buffer overflow in serial device server

Moxa NPort vulnerability CVE-2026-10829 stack buffer overflow in serial device server

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)

Do Son June 18, 2026

Industrial network gear is back in the spotlight. Moxa has disclosed two flaws in its NPort serial...

Critical Eppendorf Bioreactor Security Flaw Disclosed

Do Son June 1, 2026

An urgent industrial control security warning has been issued for laboratory facilities. Specifically, researchers discovered a critical...

The Global Surge in Modbus/TCP Probes Targeting Our Physical World Modbus Exploitation ICS Security

The Global Surge in Modbus/TCP Probes Targeting Our Physical World

Do Son April 24, 2026

Between September and November 2025, a massive wave of suspicious activity targeted industrial control systems worldwide, proving...

Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations AVEVA Pipeline Simulation Flaw CVE-2026-5387

Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations

Do Son April 18, 2026

Industrial software giant AVEVA has issued a critical security advisory for its Pipeline Simulation platform, warning of...

Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043

Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers

Do Son April 17, 2026

A security flaw has been identified in industrial control systems manufactured by Horner Automation, posing a significant...

Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems

Do Son April 8, 2026

In a major joint advisory released on April 7, 2026, a coalition of U.S. federal agencies—including the...

Critical RCE and SQLi Flaws Shatter mbCONNECT24 Industrial Security mbCONNECT24 Vulnerabilities Industrial RCE

Critical RCE and SQLi Flaws Shatter mbCONNECT24 Industrial Security

Do Son April 6, 2026

In a significant alert for the industrial automation sector, CERT@VDE has disclosed a series of high-severity vulnerabilities...

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

Critical 9.8 CVSS Flaw in Pharos Mosaic Controllers Grants Root Access to Unauthenticated Attackers

Do Son March 27, 2026

A security advisory has been issued by CISA regarding a critical vulnerability discovered in Pharos Controls’ Mosaic...