(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – March 5, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On March 5, 2026, CISA Released Three Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Delta Electronics CNCSoft-G2
• Universal Boot Loader (U-Boot) (Update A) – Used in Water and Wastewater Systems and Energy
• Johnson Controls PowerG, IQPanel and IQHub (Update A)

On March 3, 2026, CISA Released Nine Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet Module
• Hitachi Energy Relion REB500 – Used in Energy
• Hitachi Energy RTU500 Product
• Portwell Engineering Toolkits – Used in Energy
• Labkotec LID-3300IP – Used in Energy
• Mobiliti e-mobi.hu – Used in Energy
• ePower epower.ie – Used in Energy
• Everon api.everon.io – Used in Energy
• Hitachi Energy RTU500 Series Product (Update B) – Used in Energy

Additional Alerts, Updates, and Bulletins:

• March 5 – CISA Adds Five Known Exploited Vulnerabilities to Catalog
• March 3 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• CISA Releases Update to RESURGE Malware Analysis Report