CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.
Filters
1 active1 advisories found
2NGA003256
Netcontrol 100, 200, 500, GW502-iM, NAM PHP2Shell Critical Vulnerabilities
Published
30 October 2026
Last update
6 November 2026
Linked CVEs
Affected sectors
Risk evaluation
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on affected products.
Mitigation summary
The problem is corrected in the following software release packages published for products: - Netcon 200 (GWDD-A03): Software release A103.03.020 published Nov-2-2026 ABB recommends that customers apply the update at earliest convenience. The process to install updates and identify the installed product version is described in the user manual and release note document attached to installation package.
Revision history (2)
Initial publication — 6 November 2026
Added Netcontrol Netcon GW502-iM and updated Recommended Immediate Actions section after new software release for Netcon 200 (GWDD-A03) product.
Update A — 30 October 2026
Initial version.