(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – January 22, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On January 20, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Schneider Electric EcoStruxure Foxboro DCS – Used in Energy
• Schneider Electric devices using CODESYS Runtime – Used in Energy
• Rockwell Automation Verve Asset Manager
• Schneider Electric Modicon M340, MC80, and Momentum Unity M1E (Update B) – Used in Energy
• Schneider Electric Uni-Telway Driver (Update B) – Used in Energy
• Mitsubishi Electric MELSOFT Update Manager (Update A)

On January 22, 2026, CISA Released Ten Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Schneider Electric EcoStruxure Process Expert – Used in Energy
• AutomationDirect CLICK Programmable Logic Controller
• Rockwell Automation CompactLogix 5370
• Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool – Used in Energy
• Weintek cMT X Series HMI EasyWeb Service
• Hubitat Elevation Hubs – Used in Energy
• Delta Electronics DIAView – Used in Water and Wastewater Systems & Energy
• EVMAPA
• Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)
• Hitachi Energy Relion 670/650 and SAM600-IO Series (Update B)

Additional Alerts, Updates, and Bulletins:

• January 22– CISA Adds Four Known Exploited Vulnerability to Catalog
• January 21– CISA Adds One Known Exploited Vulnerability to Catalog