CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 18:56.
Filters
1 active1 advisories found
ICSA-26-204-01
Johnson Controls C-CURE 9000 and Victor application server (Update A)
Published
23 July 2026
Last update
11 August 2026
Linked CVEs
Affected sectors
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution.
Mitigation summary
Johnson Controls recommends the following upgrades to address the vulnerable deserialization path: Upgrade to C-CURE 9000 v3.20 or later
Revision history (2)
Initial publication — 23 July 2026
Initial Republication of Johnson Controls Product Security Advisories JCI-PSA-2026-07, JCI-PSA-2026-13, and JCI-PSA-2026-16.
Update A — 11 August 2026
Update A - Made changes to affected products and mitigations.