(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – June 25, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On June 25, 2026, CISA Released Eight Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• pydicom pynetdicom Library
• OHIF Viewers DICOM
• Yokogawa FAST/TOOLS and CI Server – Used in Energy
• Evoke Systems – Used in Energy
• Horner Automation Cscape
• Daktronics Controller Firmware
• H.VIEW HV-500S6 IP Camera
• Delta Electronics DTM Soft
• Schneider Electric PowerLogic P7 – Used in Energy
• AzeoTech DAQFactory (Update A)

On June 23, 2026, CISA Released Five Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Siemens WinCC Certificate Manager – Used in Energy
• Siemens SIPROTEC 5 – Used in Energy
• Siemens Products using OpenSSL – Used in Energy
• Siemens SINEC INS – Used in Energy
• ABB Freelance Security Lock
• Impact of Linux Kernel vulnerabilities on B&R products
• Hubbell Aclara Metrum Cellular Web Interface – Used in Energy
• Brightpick Mission Control / Internal Logic Control (Update A)
• Rockwell Automation Arena (Update C)
• Zero Motorcycles Firmware (Update A)

Additional Alerts, Updates, and Bulletins:

• June 23 – CISA Adds Four Known Exploited Vulnerabilities to Catalog
• CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure