ICS Security Week in Review — 28 July 2026
This week's advisory feeds produced 22 ICS security advisories across 9 vendors.
At a Glance
| | |
|---|---|
| Total advisories | 22 |
| Critical severity | 6 |
| High severity | 9 |
| Actively exploited (CISA KEV) | 1 |
| Vendors affected | 9 |
By source:
- CISA ICS-CERT: 17
- BSI CERT-Bund (EU): 5
---
⚠️ Actively Exploited This Week
1 advisory this week involve CVEs on CISA's Known Exploited Vulnerabilities (KEV) catalog — meaning attackers are actively using them right now. These should be your highest priority.
---
Top Advisories This Week
#### 🔴 ICSA-26-204-04 — CVSS 10.0
Panduit IntraVUE
Affected: Pronetiqs — CVE-2026-40430, CVE-2026-42933 +3 more
#### 🔴 ICSA-26-202-03 — CVSS 10.0
Siemens Opcenter X
Affected: Siemens — CVE-2026-56451
#### 🔴 ICSA-26-202-01 — CVSS 9.8
Tycon Systems TPDIN-Monitor-WEB2
Affected: Tycon Systems — CVE-2026-61884, CVE-2026-55985
#### 🔴 ICSA-26-202-04 — CVSS 9.8
Siemens SIDIS Secured SmartPlug
Affected: Siemens — CVE-2022-23303, CVE-2022-23304 +10 more
#### 🔴 ICSA-26-202-06 — CVSS 9.8 ⚠️ ACTIVELY EXPLOITED
Siemens CADRA
Affected: Siemens — CVE-2005-2096, CVE-2016-9840 +9 more
---
Most Active Vendors This Week
- Siemens — 5 advisories
- Rockwell Automation — 5 advisories
- Open Source — 4 advisories
- Johnson Controls — 2 advisories
- MZ Automation — 2 advisories
---
Don't Miss the Next One
OTWarden monitors CISA ICS-CERT, BSI CERT-Bund (EU), Siemens ProductCERT, and Rockwell Automation 24/7 and emails you within 2 hours when a new advisory matches your watchlist — filtered to your specific vendors and products.
Browse this week's full list at otwarden.com/top-advisories — no login needed.