(TLP:CLEAR) CISA ICS Advisories, Additional Alerts, Updates, and Bulletins – October 1, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS security advisories, along with additional alerts, updates, and bulletins:

ICS Advisories:

On October 1, 2026, CISA Released Six Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Armatura LLC Armatura One – Used in Energy
• Monta monta.app – Used in Energy
• ABB Protection and Control IED Manager PCM600 – Used in Energy
• Johnson Controls EasyIO Neo Series EC and CW Controllers – Used in Energy
• Johnson Controls EasyIO Neo Series EC and CW Controllers – Used in Energy
• Meari IoT Cloud Platform OpenAPI Service

On September 29, 2026, CISA Released Seven Industrial Control Systems Advisories for products used across multiple sectors, please check these latest advisories for specific equipment used across your ICS/SCADA environments and address accordingly:

• Lantronix G520 Series Cellular Gateway – Used in Water and Wastewater Systems and Energy
• Toptech TMS7 and TopHAT – Used in Energy
• VIVOTEK Camera Firmware – Used in Energy
• Baicells Nova 430H
• IAnjvision YSSD-RTMP-H5
• MikroTik RouterOS
• Viidure Dashcam Android Application

Additional Alerts, Updates, and Bulletins:

• September 30 – CISA Adds One Known Exploited Vulnerability to Catalog
• September 29 – CISA Adds One Known Exploited Vulnerability to Catalog
• September 27 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• September 25 – CISA Adds One Known Exploited Vulnerability to Catalog
• September 25 – CISA Adds Two Known Exploited Vulnerabilities to Catalog
• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway