(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – June 4, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On June 4, 2026, CISA Released Seven Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• NAVTOR NavBox
• Hitachi Energy ITT600 Explorer – Used in Energy
• B&R PPT30 Operating System – Used in Water and Wastewater Systems and Energy
• Hitachi Energy RTU500 – Used in Water and Wastewater Systems and Energy
• Hitachi Energy MACH HiDraw – Used in Energy
• Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E)
• Schneider Electric Modicon M340 Controller and Communication Modules (Update A) – Used in Energy

On June 2, 2026, CISA Released Two Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Dreame Technology iOS and Android Mobile Applications (Update A)
• Schneider Electric EcoStruxure Process Expert (Update A) – Used in Water and Wastewater Systems and Energy

Additional Alerts, Updates, and Bulletins:

• June 03  – CISA Adds One Known Exploited Vulnerability to Catalog
• June 02 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• June 01 – CISA Adds One Known Exploited Vulnerability to Catalog
• May 29 – CISA Adds One Known Exploited Vulnerability to Catalog
• CISA and Partners Urge Hardening Automatic Tank Gauge Systems