(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – September 3, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On September 3, 2026, CISA Released Ten Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A) – Used in Water and Wastewater Systems and Energy
• Tycon Systems TPDIN-Monitor-WEB2 (Update A)
• OPCFoundation OPC UA LocalDiscoveryServer (LDS) – Used in Water and Wastewater Systems and Energy
• IXON VPN Client – Used in Water and Wastewater Systems and Energy
• Rockwell Automation ControlFLASH – Used in Water and Wastewater Systems and Energy
• Rockwell Automation ArmorStart LT
• Rockwell Automation 1756-ENBT Module – Used in Water and Wastewater Systems
• Inductive Automation Ignition  – Used in Energy
• Pyramid Solutions NetStaX EtherNet/IP Stack – Used in Water and Wastewater Systems
• Tycon Systems TPDIN-Monitor-WEB3 – Used in Energy

On September 1, 2026, CISA Released Eight Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Mitsubishi Electric Multiple FA Engineering Software Products (Update G)
• Rockwell Automation 1734 POINT I/O (Update A)
• Rockwell Automation RSLinx Classic
• Rockwell Automation Redundancy Module Configuration Tool
• Rockwell Automation Logix Platform
• Rockwell Automation FactoryTalk Activation Manager
• Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
• Rockwell Automation Historian ME – Used in Water and Wastewater Systems

Additional Alerts, Updates, and Bulletins:

• September 2 – CISA Adds Seven Known Exploited Vulnerabilities to Catalog
• August 31 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Preparing for the Post-Quantum Era: A Call to Action
• Communicating Under Pressure: Best Practices for Service Providers