CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active

Reset filters

Search: VDE-2026-098

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2026-098

Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation for SW Tools

Phoenix Contact — CodeMeter Runtime licensed software components

Phoenix Contact PSIRThigh

Published

4 November 2026

Last update

4 November 2026

Linked CVEs

CVE-2026-81573 CVE-2026-81574 CVE-2026-81575 CVE-2026-81576 CVE-2026-81572

Affected sectors

Risk evaluation

This advisory addresses multiple security vulnerabilities in Phoenix Contact products using the software CodeMeter Runtime like licensed desktop software tools. These security vulnerabilities only may occur with CodeMeter Runtime 8.x versions <V8.41a and CodeMeter Runtime 9.x versions <9.10 from Wibu-Systems.

Mitigation summary

Updates for the affected products are planned for Q4 2026. Until the fix is available, please follow the mitigation measures and check the respective product page on the Phoenix Contact website regularly to see if the fix is already available.

Revision history (1)

Initial publication — 4 November 2026
Initial

Official source: Phoenix Contact PSIRT