Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active
Reset filters

1 advisories found

4TLB000837

IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities

ABB — IPEC iSM Local Server

ABB PSIRTcritical

Published

6 November 2026

Last update

6 November 2026

Affected sectors

Risk evaluation

ABB is aware of public reports of vulnerabilities in third-party components (PHP and NTFS-3G) included in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities may insert and run arbitrary code on affected products. No active exploitations of the vulnerabilities have been reported to ABB by the time of writing this document. ABB will inform affected customers if this changes.

Mitigation summary

For the products and version numbers listed below, please apply the relevant software patches according to the instructions provided by your ABB contact. - IPEC iSM Local Server: Debian 11 (Bullseye) - IPEC iSM Local Server: Debian 12 (Bookworm) - IPEC iSM Local Server: Debian 13 (Trixie) If further support is required to install the patches, please contact IPEC Sales (ipec.sales@gb.abb.com). Installation support may be chargeable where not covered by your existing warranty, maintenance or support agreement. ABB recommends that customers apply the update as soon as possible.

Revision history (1)
  1. Initial publication — 6 November 2026

    Initial version.

Official source: ABB PSIRT