Industrial giants Siemens, Schneider Electric, and Phoenix Contact have published August 2026 Patch Tuesday advisories to inform customers about vulnerabilities found in their ICS products.
Siemens has published 10 new advisories. One covers a maximum-severity missing-authentication vulnerability in Simatic IoT2050 Advanced devices. A remote, unauthenticated attacker can exploit it to execute arbitrary code on the underlying server with elevated privileges.
A critical code execution vulnerability has also been fixed by Siemens in the Siveillance Video Management Servers.
High-severity flaws have been addressed in Solid Edge, Simcenter Nastran, Siemens License Server, Simcenter Femap, Parasolid, and Logo! Soft Comfort. They can be exploited to crash applications, execute arbitrary code, elevate privileges, read arbitrary files, or obtain sensitive information.
Medium-severity issues have been resolved in Ruggedcom devices and Desigo controllers.
Schneider Electric has published two new advisories describing vulnerabilities in NetBotz 5 and PowerChute Serial Shutdown products.
In NetBotz, the company fixed two code/command execution issues, while in PowerChute it patched a flaw allowing excessive authentication attempts, which could lead to disruption or access to system data.
Phoenix Contact has published one advisory for multiple vulnerabilities in PLCnext firmware. The flaws can be exploited by unauthenticated attackers to cause a DoS condition, trigger unexpected behavior, or execute malicious SQL queries.
SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity
Honeywell has published several advisories for its building management system products.
The cybersecurity agency CISA published three new advisories on Tuesday and several others earlier this month. The new advisories cover vulnerabilities in Pulsetto, Mira (Quanovate Tech), and Johnson Controls products.
Related: ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell
Related: ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact