ICS Security Week in Review — 21 July 2026
This week's advisory feeds produced 46 ICS security advisories across 13 vendors.
At a Glance
| | |
|---|---|
| Total advisories | 46 |
| Critical severity | 3 |
| High severity | 9 |
| Actively exploited (CISA KEV) | 1 |
| Vendors affected | 13 |
By source:
- CISA ICS-CERT: 14
- Rockwell Automation: 12
- BSI CERT-Bund (EU): 11
- Siemens ProductCERT: 9
---
⚠️ Actively Exploited This Week
1 advisory this week involve CVEs on CISA's Known Exploited Vulnerabilities (KEV) catalog — meaning attackers are actively using them right now. These should be your highest priority.
---
Top Advisories This Week
#### 🔴 ICSA-26-195-04 — CVSS 10.0
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Affected: Rockwell Automation — CVE-2026-10577
#### 🔴 ICSA-26-195-03 — CVSS 9.9
ABB T-MAC Plus
Affected: ABB — CVE-2025-14771, CVE-2025-14772 +2 more
#### 🔴 ROCKWELL-SD1781 — CVSS 9.2
SD1781 | CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
Affected: Rockwell Automation — CVE-2025-12011
#### 🟠 ROCKWELL-SD1780 — CVSS 8.7
SD1780 | 1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID
Affected: Rockwell Automation — CVE-2026-9653
#### 🟠 ICSA-26-197-06 — CVSS 8.6
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix
Affected: Rockwell Automation — CVE-2025-12011, CVE-2025-12012 +1 more
---
Most Active Vendors This Week
- Rockwell Automation — 18 advisories
- Siemens — 10 advisories
- Open Source — 5 advisories
- ABB — 3 advisories
- Microsoft — 2 advisories
---
Don't Miss the Next One
OTWarden monitors CISA ICS-CERT, BSI CERT-Bund (EU), Siemens ProductCERT, and Rockwell Automation 24/7 and emails you within 2 hours when a new advisory matches your watchlist — filtered to your specific vendors and products.
Browse this week's full list at otwarden.com/top-advisories — no login needed.