[Control systems] CISA ICS security advisories (AV26–475)

Serial number: AV26-475
Date: May 19, 2026

Between May 11 and 17, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

  • ABB AC500 V3 - firmware version PM5xxx 3.9.0 and 3.9.0_HF1
  • ABB AC500 V3 - versions prior to 3.9.0
  • ABB Automation Builder Gateway - versions prior to 2.9.0
  • ABB WebPro SNMP Card PowerValue - versions prior to 1.1.8.k and 1.1.8.p
  • Fuji Electric Tellus - version 5.0.2
  • Siemens Industrial Devices - multiple models and versions
  • Siemens Opcenter RDnL - all versions
  • Siemens Ruggedcom Rox MX/RX models - versions prior to 2.17.1
  • Siemens SENTRON 7KT PAC1261 Data Manager - versions prior to 2.1.0
  • Siemens SIMATIC CN 4100 - versions prior to 5.0
  • Siemens SIMATIC S7 PLC Web Server - multiple versions and models
  • Siemens SIMATIC - multiple versions and models
  • Siemens SIPROTEC 5 - multiple versions and models
  • Siemens Siemens ROS# - versions prior to 2.2.2
  • Siemens Simcenter Femap - versions prior to 2512.0003
  • Siemens Solid Edge - versions prior to 226.0.5
  • Siemens Teamcenter - multiple versions and models
  • Siemens gWAP - versions prior to 3.1.1
  • Subnet Solutions PowerSYSTEM Center - multiple versions and models
  • Universal Robots Polyscope 5 - versions prior to 5.25.1

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: