Serial number: AV26-241
Date: March 16, 2026
Updated: June 23, 2026
Between March 9 and 15, 2026, CISA published ICS advisories to address vulnerabilities in the following products:
- Apeman Cameras ID71 – all versions
- Ceragon Siklu MultiHaul and EtherHaul Series – multiple versions
- Honeywell IQ4x BMS Controller – multiple versions and models
- Inductive Automation Ignition Software – versions prior to 8.3.0
- Lantronix EDS3000PS – version 3.1.0.0R2
- Lantronix EDS5000 – version 2.1.0.0R3
- Siemens Heliox EV Chargers – version Heliox Mobile DC 40 kW EV Charging Station
- Siemens Heliox EV Chargers – version Heliox Flex 180 kW EV Charging Station
- Siemens RUGGEDCOM APE1808 Devices – all versions
- Siemens SIDIS Prime – versions prior to V4.0.800
- Siemens SIMATIC – multiple versions and models
- Trane Tracer Concierge – versions prior to v6.3.2310
- Trane Tracer SC – versions prior to v4.4_SP7
- Trane Tracer SC+ – versions prior to v6.3.2310
Update 1
On June 23, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-67038 affecting Lantronix EDS5000 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.