Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 19:27.

Filters

1 active
Reset filters

1 advisories found

ICSA-26-204-02

Johnson Controls XAAP Android

Johnson Controls Inc. — XAAP Android

CISAlow

Published

23 July 2026

Last update

23 July 2026

Linked CVEs

Affected sectors

Risk evaluation

Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device.

Mitigation summary

Johnson Controls recommends users update the XAAP Android application to version 1.53 or later, which contains the fix for this vulnerability.

Revision history (1)
  1. Initial publication — 23 July 2026

    Initial Republication of Johnson Controls JCI-PSA-2026-10

Official source: CISA