[Control systems] CISA ICS security advisories (AV26–204)

Serial number: AV26-204
Date: March 9, 2026

Between March 2 and 8, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

  • Delta Electronics CNCSoft-G2 – versions prior to V2.1.0.39
  • ePower epower.ie – all versions
  • Everon OCPP Backends api.everon.io – all versions
  • Hitachi Energy Relion REB500 Product – version 8.3.3.0 and prior
  • Hitachi Energy RTU500 Product – multiple versions
  • Labkotec LID-3300IP – all versions
  • Mitsubishi Electric MELSEC iQ-F FX5-ENET/IP Ethernet Module FX5-ENET/IP – version 1.106 and prior
  • Mitsubishi Electric MELSEC iQ-F FX5-EIP EtherNet/IP Module FX5-EIP – all versions
  • Mobiliti e-mobi.hu – all versions
  • Portwell Engineering Toolkits – version 4.8.2

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: