Serial number: AV26–506
Date: May 25, 2026
[Control systems] CISA ICS security advisories (AV26–506)
Between May 18 and 24, 2026, CISA published ICS advisories to address vulnerabilities in the following products:
- ABB B&R Automation Runtime – versions prior to 6.4
- ABB B&R Automation Studio – versions prior to 6.5
- ABB B&R PCs – multiple versions and models
- ABB CoreSense HM – version 2.3.1 and prior
- ABB CoreSense M10 – version 1.4.1.12 and prior
- ABB Terra AC Wallbox (JP) – versions 1.8.33 and prior
- Abb B&R Automation Studio – versions prior to 6.5
- Hitachi Energy GMS600 – versions 1.3.0 to 1.3.1
- Kieback & Peter DDC Building Controllers – multiple versions and models
- ScadaBR – version 1.2.0
- Siemens RUGGEDCOM APE1808 – all versions
- ZKTeco CCTV Cameras – firmware version prior to V5.0.1.2.20260421
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.