(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – April 30, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On April 30, 2026, CISA Released Eight Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• ABB System 800xA, Symphony Plus IEC 61850 – Used in Water and Wastewater Systems and Energy
• ABB PCM600
• ABB Edgenius Management Portal
• ABB Ability OPTIMAX – Used in Water and Wastewater Systems and Energy
• ABB AWIN Gateways
• ABB Ability Symphony Plus Engineering – Used in Water and Wastewater Systems and Energy
• Mitsubishi Electric Multiple FA Products (Update C)
• Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet Module (Update A)

On April 28, 2026, CISA Released Twelve Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• NSA GrassMarlin

Additional Alerts, Updates, and Bulletins:

• April 28 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• April 24 – CISA Adds Four Known Exploited Vulnerabilities to Catalog
• April 23 – CISA Adds One Known Exploited Vulnerability to Catalog
• CISA and Federal Partners Release Joint Guidance for Adapting Zero Trust Principles to Operational Technology