CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active

Reset filters

Search: sca-2026-0014

Vendor

Protocol

Sector

Severity

Source

1 advisories found

sca-2026-0014

Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Device Manager'

SICK — Engineering Tools

SICK PSIRTcritical

Published

14 October 2026

Last update

14 October 2026

Linked CVEs

CVE-2026-27942 CVE-2026-25896 CVE-2026-26278

Affected sectors

Risk evaluation

Multiple vulnerabilities in the third-party component fast-xml-parser affect the Device Manager Extension in Sentio Creator. The extension is maintained and updated independently from SICK Sentio Creator, but successful exploitation of these vulnerabilities could impact the security of the Sentio Creator. SICK strongly recommends upgrading the extension to remediate the identified issues.

Mitigation summary

It is strongly recommended to upgrade the Device Manger Extension to version 1.1.1.

Revision history (1)

Initial publication — 14 October 2026
Initial version

Official source: SICK PSIRT