CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.
Filters
1 active1 advisories found
Published
23 October 2026
Last update
4 November 2026
Linked CVEs
Affected sectors
Risk evaluation
On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory covers the status of impact of various Siemens software products.
Mitigation summary
See the official CISA advisory for mitigating measures.
Revision history (4)
Initial publication — 23 October 2026
Publication Date
Update A — 26 October 2026
Added Valor NPI, Solid Edge and Capital to "Known Not Affected Product" list
Update B — 27 October 2026
Added Insights Hub, Simcenter Flux and Simcenter Simlab
Update C — 28 October 2026
Added Opcenter Execution Foundation, Opcenter Quality, Opcenter Intelligence, Opcenter RDnL, AX4, Supply Chain Suite, Opcenter Intra Plant Logistics, Opcenter Connect Electronics, Xcargo, Designcenter and Designcenter X