Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2026-070

Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual

Helmholz — myREX24V2

Helmholz PSIRThigh

Published

23 June 2026

Last update

23 June 2026

Linked CVEs

Affected sectors

Risk evaluation

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

Mitigation summary

Update the myREX24V2/myREX24V2.virtual instance to version 2.20.2.

Revision history (2)
  1. Initial publication — 23 June 2026

    Initial revision.

  2. Update A — 23 June 2026

    The alias has been corrected

Official source: Helmholz PSIRT