Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2026-089

Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway

Lenze — VPN Client

Lenze PSIRTcritical

Published

21 September 2026

Last update

21 September 2026

Linked CVEs

Affected sectors

Risk evaluation

The Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privileges.

Mitigation summary

The Lenze VPN Client is available and downloadable via the Fleet Manager. Please update this Client. Obtain the update software (version >= 1.4.7) from https://cloud.lenze.digital/fleet-manager/tools and run the installer on a windows and macOS system or run the following commands in an linux system: ``` tar -xzf vpn_client_x64.tar.gz cd vpn_client_x64 sudo ./install ```

Revision history (1)
  1. Initial publication — 21 September 2026

    initial revision

Official source: Lenze PSIRT