ICS Security Week in Review — 4 August 2026
This week's advisory feeds produced 29 ICS security advisories across 19 vendors.
At a Glance
| | |
|---|---|
| Total advisories | 29 |
| Critical severity | 3 |
| High severity | 9 |
| Actively exploited (CISA KEV) | 2 |
| Vendors affected | 19 |
By source:
- CISA ICS-CERT: 19
- BSI CERT-Bund (EU): 9
- Rockwell Automation: 1
---
⚠️ Actively Exploited This Week
2 advisories this week involve CVEs on CISA's Known Exploited Vulnerabilities (KEV) catalog — meaning attackers are actively using them right now. These should be your highest priority.
---
Top Advisories This Week
#### 🔴 ICSA-26-209-01 — CVSS 9.8
Siemens Desigo CC
Affected: Siemens — CVE-2025-15467
#### 🔴 ICSA-26-209-04 — CVSS 9.8 ⚠️ ACTIVELY EXPLOITED
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Affected: Siemens — CVE-2021-41617, CVE-2023-28531 +350 more
#### 🔴 ICSA-26-209-02 — CVSS 9.1
Siemens Mendix Runtime
Affected: Siemens — CVE-2026-7891
#### 🟠 ICSA-26-211-03 — CVSS 8.8
Toptech Systems RCU II+ and Multiload II+
Affected: Toptech Systems — CVE-2026-12562
#### 🟠 ICSA-26-211-08 — CVSS 8.8
o6 Automation open62541
Affected: o6 Automation GmbH — CVE-2026-63362, CVE-2026-65423 +2 more
---
Most Active Vendors This Week
- Siemens — 4 advisories
- Open Source — 4 advisories
- MikroTik — 2 advisories
- MZ Automation GmbH — 2 advisories
- Rockwell Automation — 2 advisories
---
Don't Miss the Next One
OTWarden monitors CISA ICS-CERT, BSI CERT-Bund (EU), Siemens ProductCERT, and Rockwell Automation 24/7 and emails you within 2 hours when a new advisory matches your watchlist — filtered to your specific vendors and products.
Browse this week's full list at otwarden.com/top-advisories — no login needed.