Bulletins

SIEMENS CERT
08/11/2026
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR, PSM or DFT format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new versions for the affected products and recommends …
SIEMENS CERT
08/11/2026
Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are …
SIEMENS CERT
08/11/2026
A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens has released new versions for the affected products and recommends to …
SIEMENS CERT
08/11/2026
Simcenter Femap contains two file parsing vulnerabilities that could be triggered when the application reads files in BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has …
CISA (ALL)
08/10/2026

Advisory at a Glance

Title #StopRansomware: Gunra Ransomware
Original Publication August 10, 2026
Executive Summary Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations. The Gunra ransomware variant first appeared …
CISA (ALL)
08/07/2026

View CSAF

Summary

ATN-B1 CPDLC relies on legacy clear text unauthenticated radio frequency links. Research demonstrates that these characteristics allow unauthorized message injection, denial-of-service conditions, and forced session resets. These vulnerabilities do not constitute an unsafe aircraft condition but can degrade operational safety margins by increasing workload, delaying …

CISA (ALL)
08/06/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device.

The following versions of Johnson Controls Inc. TL280 are affected:

  • TL280 <5.63 
CVSS Vendor Equipment Vulnerabilities
CISA (ALL)
08/06/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data.

The following versions of ABB Ability Zenon are affected:

  • IIoT services with MongoDB (4.2) installed on ABB Ability Zenon vers:all/*