Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:32.

Filters

1 active
Reset filters

1 advisories found

sca-2026-0017

SICK Products affected by Brotli Vulnerability (Broccoli2Shell)

SICK — Localization systems

SICK PSIRTcritical

Published

6 November 2026

Last update

6 November 2026

Linked CVEs

Affected sectors

Risk evaluation

SICK identified multiple products affected by the Brotli vulnerability, also known as Broccoli2Shell (CVE-2026-111497). Successful exploitation of this vulnerability could impact the confidentiality, integrity, and availability of affected systems. At the time of publication, SICK is not aware of any active exploitation of this vulnerability targeting SICK products. SICK strongly recommends that customers review and implement the remediation measures provided in this advisory to reduce potential security risks.

Mitigation summary

Users are recommended to re-install or upgrade to version 2026.1.3 while setting the global.imagePullPolicy to 'IfNotPresent'.

Revision history (1)
  1. Initial publication — 6 November 2026

    Initial version

Official source: SICK PSIRT