(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – April 23, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On April 23, 2026, CISA Released Seven Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• YADEA T5 Electric Bike
• Carlson Software VASCO-B GNSS Receiver
• Milesight Cameras
• SpiceJet Online Booking System
• Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera
• Intrado 911 Emergency Gateway (EGW)
• Schneider Electric Modicon Controllers (Update A) – Used in Energy

On April 21, 2026, CISA Released Twelve Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Siemens TPM 2.0
• Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary
• Siemens SINEC NMS
• Siemens Analytics Toolkit
• Hardy Barth Salia EV Charge Controller – Used in Energy
• Zero Motorcycles Firmware
• Siemens SCALANCE
• Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)
• Siemens SINEC NMS
• Silex Technology SD-330AC and AMC Manager
• Siemens Industrial Edge Management
• SenseLive X3050 – Used in Water and Wastewater Systems and Energy

Additional Alerts, Updates, and Bulletins:

• April 22 – CISA Adds One Known Exploited Vulnerability to Catalog
• April 20 – CISA Adds Eight Known Exploited Vulnerabilities to Catalog
• April 16 – CISA Adds One Known Exploited Vulnerability to Catalog
• CISA Releases Malware Analysis Report: FIRESTARTER Backdoor
• Updated Emergency Directive for Cisco Firepower and Secure Firewall Devices
• Supply Chain Compromise Impacts Axios Node Package Manager​