(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – May 21, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On May 21, 2026, CISA Released Seven Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• ABB CoreSense HM and CoreSense M10
• Siemens RUGGEDCOM APE1808 Devices
• ScadaBR – Used in Water and Wastewater Systems and Energy
• ZKTeco CCTV Cameras
• Kieback & Peter DDC Building Controllers
• ABB 800xA Base (Update A) – Used in Water and Wastewater Systems and Energy
• ABB RMC-100 (Update A)

On May 19, 2026, CISA Released Seven Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Hitachi Energy GMS600
• ABB B&R PCs – Used in Energy
• ABB B&R Automation Studio – Used in Energy
• ABB B&R Automation Runtime – Used in Energy
• ABB Terra AC Wallbox – Used in Energy
• Schneider Electric EcoStruxure Process Expert (Update A) – Used in Energy
• ABB Automation Builder (Update A) – Used in Energy

Additional Alerts, Updates, and Bulletins:

• May 20 – CISA Adds Seven Known Exploited Vulnerabilities to Catalog
• May 15 – CISA Adds One Known Exploited Vulnerability to Catalog
• May 14 – CISA Adds One Known Exploited Vulnerability to Catalog