Bulletins

SIEMENS CERT
08/11/2026
SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC …
SIEMENS CERT
08/11/2026
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
SIEMENS CERT
08/11/2026
Simcenter Femap contains two file parsing vulnerabilities that could be triggered when the application reads files in BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has …
CISA (ALL)
08/10/2026

Advisory at a Glance

Title #StopRansomware: Gunra Ransomware
Original Publication August 10, 2026
Executive Summary Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations. The Gunra ransomware variant first appeared …
CISA (ALL)
08/07/2026

View CSAF

Summary

ATN-B1 CPDLC relies on legacy clear text unauthenticated radio frequency links. Research demonstrates that these characteristics allow unauthorized message injection, denial-of-service conditions, and forced session resets. These vulnerabilities do not constitute an unsafe aircraft condition but can degrade operational safety margins by increasing workload, delaying …

CISA (ALL)
08/06/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened.

The following versions of Medixant RadiAnt DICOM are affected:

  • RadiAnt DICOM <=2025.2
…
CVSS
CISA (ALL)
08/06/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device.

The following versions of Johnson Controls Inc. TL280 are affected:

  • TL280 <5.63 
…
CVSS Vendor Equipment Vulnerabilities
CISA (ALL)
08/06/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data.

The following versions of ABB Ability Zenon are affected:

  • IIoT services with MongoDB (4.2) installed on ABB Ability Zenon vers:all/* 
…