CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: sca-2026-0010

Vendor

Protocol

Sector

Severity

Source

1 advisories found

sca-2026-0010

AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices

SICK — Inspector

SICK PSIRTcritical

Published

24 August 2026

Last update

24 August 2026

Linked CVEs

CVE-2026-11841

Affected sectors

Risk evaluation

Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the devices.

Mitigation summary

Users are recommended to upgrade to version 5.4.0.

Revision history (2)

Initial publication — 28 July 2026
Initial version
Update A — 24 August 2026
Added ICR to the Products

Official source: SICK PSIRT