Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 8 November 2026 at 18:29.

Filters

1 active
Reset filters
Search: ICSA-26-211-02

1 advisories found

ICSA-26-211-02

Johnson Controls OpenBlue Employee

Johnson Controls Inc. — OpenBlue Employee (FMS Employee)

CISAlow

Published

30 July 2026

Last update

30 July 2026

Affected sectors

Risk evaluation

Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files, execute stored cross-site scripting attacks, or inject arbitrary HTML content.

Mitigation summary

Johnson Controls recommends the following defensive measures to help reduce the risk of exploitation: Apply the latest product update for OpenBlue Employee (FMS Employee). Customers running V2025.3.1 [LV1.1] or earlier should apply the latest available update.

Revision history (1)

  1. Initial publication — 30 July 2026

    Initial Republication of Johnson Controls Inc. Security Advisory JCI-PSA-2026-09

Official source: CISA