Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active
Reset filters

1 advisories found

SA26P015

APROL Impact of PHP2Shell

B&R Industrial Automation GmbH — APROL

ABB PSIRTcritical

Published

23 October 2026

Last update

3 November 2026

Affected sectors

Risk evaluation

B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected devices.

Mitigation summary

The problem is corrected in the following product versions: - version line R4.4-01: APROL-AutoYaST-DVD-V4.4-010.12.261023-SLE15-SP6 - version line R4.4-65: APROL-AutoYaST-DVD-V4.4-650.4.261022-SLE15-SP7 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

Revision history (2)
  1. Initial publication — 3 November 2026

    Affected products, recommended actions

  2. Update A — 23 October 2026

    Initial version.

Official source: ABB PSIRT