(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – March 19, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On March 19, 2026, CISA Released Five Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Schneider Electric EcoStruxure Automation Expert – Used in Energy
• Schneider Electric EcoStruxure PME and EPO – Used in Water and Wastewater Systems and Energy
• CTEK Chargeportal – Used in Energy
• IGL-Technologies eParking.fi – Used in Energy
• Automated Logic WebCTRL Premium Server

On March 17, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• CODESYS in Festo Automation Suite
• Schneider Electric SCADAPack and RemoteConnect – Used in Energy
• Schneider Electric EcoStruxure Data Center Expert – Used in Energy
• Siemens SICAM SIAPP SDK
• Hitachi Energy’s Relion 670, 650, SAM600-IO series (Update A) – Used in Energy
• Schneider Electric EcoStruxure Power Build Rapsody (Update A) – Used in Energy

Additional Alerts, Updates, and Bulletins:

• March 19 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 18 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 18 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 16 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 13 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization