[Control systems] CISA ICS security advisories (AV26–530)

Serial number: AV26–530
Date: June 1, 2026

Between May 25 and 31, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

  • ABB AC500 V2 – versions prior to 2.5.2 and 2.5.3
  • ABB Ability Camera Connect – versions prior to 1.5.0.14 and 1.5.0.15
  • ABB Ability Zenon – versions 7.50 to 14
  • ABB B&R Automation Runtime – versions prior to 6.3 and Q4.93
  • ABB EIBPORT V3 KNX (2CLA963710W1001) / (2CSM256242R2001) – versions prior to 3.9.2
  • ABB EIBPORT V3 KNX GSM (2CLA963720W1001) – versions prior to 3.9.2
  • ABB LVS MConfig – versions 1.4.9.21 and prior
  • CP Plus 8 Ch. Network Video Recorder – multiple versions
  • Eppendorf BioFlo 320 – all versions
  • Frontier X Android application – versions prior to v15.0.0
  • Frontier X IOS application– versions prior to v25.0.0
  • Frontier X2 – all versions
  • Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter – version 7.03T.07
  • KMW CCTV Security Cameras – versions KM-IP521 IPCAM_V4.04.91.230307 and KM-IP421 IPCAM_V4.04.53.210416
  • MacGregor Voyage Data Recorder (VDR) G4e – versions prior to V5.250
  • Schneider Electric EcoStruxure Machine Expert HVAC – versions prior to 1.10.0
  • Switch Actuator 4 DU – all versions
  • Switch Actuator, door/light 4 DU – all versions
  • Terra AC Wallbox – multiple versions and models
  • XCharge C6 – version C6

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

Date modified: