(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – March 26, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On March 26, 2026, CISA Released Four Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• WAGO GmbH & Co. KG Industrial Managed Switches – Used in Energy
• OpenCode Systems OC Messaging and USSD Gateway
• PTC Windchill Product Lifecycle Management
• Honeywell IQ4 Series BMS Controller (Update A)

On March 24, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Grassroots DICOM (GDCM)
• Pharos Controls Mosaic Show Controller
• Schneider Electric Plant iT/Brewmaxx – Used in Energy
• WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update A)

Additional Alerts, Updates, and Bulletins:

• March 26 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 25 – CISA Adds One Known Exploited Vulnerability to Catalog
• March 20 – CISA Adds Five Known Exploited Vulnerabilities to Catalog