CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active

Reset filters

Search: VDE-2026-084

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2026-084

Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation in the PLCnext Firmware

Phoenix Contact — Catan C1

Phoenix Contact PSIRThigh

Published

4 November 2026

Last update

4 November 2026

Linked CVEs

CVE-2026-81573 CVE-2026-81574 CVE-2026-81575 CVE-2026-81576

Affected sectors

Risk evaluation

This advisory addresses security vulnerabilities in Phoenix Contact products with an integrated CodeMeter Runtime, like PLCnext devices and Virtual Controls. These security vulnerabilities only may occur with versions <8.41a of the integrated software CodeMeter Runtime from Wibu-Systems. Please see listed products to determine which devices and firmware versions are affected.

Mitigation summary

Please check the Phoenix Contact e-Shop regularly to see if the fixed firmware is already available for your specific PLCnext device or Virtual PLCnext Control. The Fix is planned to be integrated in version 2026.0.6 which is planned for Q4/2026.

Revision history (1)

Initial publication — 4 November 2026
Initial

Official source: Phoenix Contact PSIRT