(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – July 2, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On July 2, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• ST Engineering iDirect iQ-Series Terminals – Used in Energy
• CubeSpace CW0057 Reaction Wheel
• Gardyn IoT Hub
• Mitsubishi Electric CNC Series (Update D)
• Gardyn Home Kit (Update B)
• WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)

On June 30, 2026, CISA Released Eight Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• OFFIS DCMTK Toolkit
• Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M
• Frangoteam FUXA SCADA/HMIM – Used in Water and Wastewater Systems and Energy
• Schneider Electric EcoStruxure IT Data Center Expert – Used in Energy
• Schneider Electric EasyLogic T150 and Saitel DP RTU – Used in Energy
• Utils vulnerability impacting B&R Products
• StoneFly Storage Concentrator – Used in Energy
• Delta Electronics DVP12SE PLC

Additional Alerts, Updates, and Bulletins:

• July 1 – CISA Adds One Known Exploited Vulnerability to Catalog
• June 29 – CISA Adds One Known Exploited Vulnerability to Catalog
• June 25 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Russian Intelligence Services Continue to Target Commercial Messaging Applications