#ICS
All CosmicBytez Labs articles tagged #ICS, across news, security advisories, how-to guides, and projects.
- News
Cyberattack Hijacks Danfoss Controllers, Shuts Down Refrigerators at French Supermarkets
Attackers hijacked legacy Danfoss refrigeration controllers, forcing nonstop defrost cycles that pushed hundreds of French supermarket freezers to 50°C.
- Security
CVE-2026-105278: openPDC Docker Image Ships Hardcoded Admin Credential
A fixed admin login baked into openPDC's Docker image, with no forced change, gives network attackers full control (CVSS 9.8).
- Security
CVE-2026-95102: Critical Missing Authentication in Monta EV Charging Platform's WebSocket Endpoints
CVSS 9.4: Monta EV charging WebSocket endpoints lack authentication, allowing attackers to impersonate charging stations.
- Security
CVE-2026-82824: Critical Path Traversal in Hitachi Coding Software Suite
Critical CVSS 9.8 path traversal in Hitachi Coding Software Suite (≤ 3.3.0) lets attackers access, create, modify, or delete files on the host.
- Security
CVE-2026-63713: Time-Based Blind SQL Injection in Toptech TMS7 and TopHAT Audit Logs
Critical CVSS 9.0 time-based blind SQL injection in Toptech TMS7/TopHAT audit log search hits fuel terminal ICS/OT systems worldwide; patched in 7.8.
- Security
CVE-2026-68068: Toptech TMS7 and TopHAT Critical SQL Injection in Transaction Queue Viewer
Critical CVSS 9.0 time-based blind SQL injection in Toptech TMS7/TopHAT terminal management software's transaction queue viewer; patched in v7.8.
- News
One Packet, No Password: High-Severity TDengine Zero-Day Threatens Industrial Servers
A high-severity zero-day, CVE-2026-42542, crashes TDengine time-series database servers with one packet — 730,000+ instances run in OT, IoT, and energy.
- Security
CVE-2026-78308: DIAEnergie Authentication Bypass Grants Unauthenticated Admin Access
A critical, pre-auth flaw in Delta Electronics' DIAEnergie ICS energy-management platform lets remote attackers bypass login entirely.
- Security
CVE-2026-78312: DIAEnergie Path Traversal Enables Unauthenticated File System Access
A critical unauthenticated path traversal (CVSS 9.1) in Delta Electronics DIAEnergie lets attackers write files outside the intended directory.
- Security
Digital Watchdog VMAX DVR/NVR Missing Authorization Enables Takeover
CVE-2026-66887 (CVSS 9.6) lets attackers bypass session checks on Digital Watchdog VMAX DVR/NVR state-changing CGIs for full admin control.
- Security
Digital Watchdog VMAX Root FTP Credentials Baked In
CVE-2026-66890 (CVSS 9.6) hard-codes root-level FTP credentials into Digital Watchdog VMAX DVR/NVR firmware, enabling remote root file access.
- Security
Kalkitech ASE2000 SCADA Test Set Ships Broken TLS Certificate Checks
CVE-2026-90647 lets a network attacker bypass TLS certificate validation on the ASE2000's IEC 60870-5-104 grid protocol client.
- Security
CVE-2026-79697: Advantech WISE-6610 Unauthenticated Command Injection
A CVSS 9.9 command injection flaw in Advantech WISE-6610 industrial gateways lets remote attackers run arbitrary OS commands; a public exploit exists.
- Security
CVE-2026-75925: IXON VPN Client CRLF Injection Enables Root/SYSTEM Command Execution
IXON VPN Client before v1.4.7 lets a local attacker inject CRLF sequences into a config file consumed by a privileged process, gaining root or SYSTEM.
- Security
CVE-2026-63586: Unauthenticated Root RCE in Weidmueller IE-SR-2TX-WL Industrial Routers
Critical OS command injection via the HTTP Basic Auth username lets unauthenticated attackers run root commands on Weidmueller security routers.
- News
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers penetrated the operational technology network of a Polish combined heat and power plant through the grid operator's private cellular network,...
- News
Truck Brake Controller's Safety Recall Doubled as Hidden Security Fix
A Black Hat USA 2026 presentation revealed that a 2024 safety recall covering 450,000 heavy trucks from Volvo, International, and Paccar secretly patched...
- Security
CVE-2026-67979: NASA cFS Incorrect Access Control Allows Arbitrary Code Execution
Incorrect access control in the Executive Services component of NASA cFS v7.0.1 allows attackers to execute arbitrary code by placing a malicious shared...
- News
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Thermo Fisher Scientific has patched a vulnerability in Applied Biosystems human identification software that could allow .fsa and .hid forensic DNA...
- Security
CVE-2026-16462: PROCON-WEB SCADA Unauthenticated SQL Injection (CVSS 9.8)
A critical SQL injection vulnerability in PROCON-WEB SCADA's GetGridData endpoint allows unauthenticated remote attackers to execute arbitrary SQL...
- News
PTC Windchill Vulnerability Exploited in Ransomware Campaign
A critical unauthenticated deserialization flaw in PTC's Windchill PLM platform is being actively weaponized by the Cl0p ransomware group, targeting...
- Security
CVE-2026-15704: Critical Auth Bypass in Eclipse BaSyx Go Components
Eclipse BaSyx Go Components up to v1.0.0 contains a CVSS 9.8 authorization bypass caused by inconsistent trailing-slash handling between the ABAC...
- Security
CVE-2026-61884: Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass (CVSS 9.8)
A critical authentication bypass in the Tycon Systems TPDIN-Monitor-WEB2 web interface allows unauthenticated remote attackers to gain full administrative...
- News
In Other News: Dolphin X AI Malware, Car Anti-Theft Hack, 432 Linux Kernel CVEs
This week's security roundup covers an AI-prioritizing infostealer targeting developer machines, a hardcoded Bluetooth key in 2.2 million car anti-theft...
- Security
OpENer CIP Integer Overflow — CVE-2026-51536
A critical integer truncation vulnerability in OpENer 2.3.0 allows network attackers to trigger heap corruption or denial of service by sending malformed...
- Security
OpENer Out-of-Bounds Read in CIP ForwardOpen — CVE-2026-51537
A critical out-of-bounds read vulnerability in OpENer 2.3.0 allows unauthenticated attackers to crash industrial EtherNet/IP devices by sending malformed...
- Security
OpENer EtherNet/IP Session Access Control Bypass — CVE-2026-51538
A critical access control vulnerability in OpENer 2.3.0 allows unauthenticated attackers to send privileged encapsulation commands using arbitrary session...
- Security
CVE-2026-9695: DELMIA Apriso Manufacturing MES — Improper Authentication Enables Privileged Server Access
A critical CVSS 9.8 improper authentication vulnerability in Dassault Systèmes DELMIA Apriso (releases 2020–2026) allows unauthenticated attackers to gain...
- Security
CVE-2025-55017: Apache IoTDB Critical Path Traversal Vulnerability
Critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.5. Users must upgrade...
- Security
CVE-2025-64152: Apache IoTDB Second Critical Path Traversal Flaw
A second critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.6. Patch to 1.3.6 or...
- News
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
CISA has added CVE-2026-12569, a critical remote code execution vulnerability in PTC Windchill PDMlink and FlexPLM, to its Known Exploited Vulnerabilities...
- News
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
CISA has added CVE-2026-12569, a remote code execution flaw in PTC Windchill, to its Known Exploited Vulnerabilities catalog after confirming active...
- News
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
California Water Service has confirmed that Iranian hacker group Handala's cyberattack was limited to IT systems, with Mandiant's investigation finding no...
- News
Accenture to Acquire Majority Stake in Dragos, runZero, and NetRise in $4.1 Billion OT Cybersecurity Push
Accenture's $4.1 billion acquisition of Dragos (valued at $3.25B), runZero, and NetRise marks the largest consolidation in operational technology...
- Security
CVE-2026-12183: Critical Auth Bypass in Gas Station Automation System
A CVSS 9.8 authentication bypass in Nefteprodukttekhnika's BUK TS-G Gas Station Automation System allows any unauthenticated attacker to gain full...
- Security
CVE-2026-49186: Critical MQTT Broker Wildcard ACL Bypass
A critical CVSS 9.8 vulnerability in a local MQTT broker fails to enforce topic-level ACLs, allowing any client to use wildcard characters to enumerate hidden…
- Security
CVE-2026-5433: Honeywell CNM Critical Command Injection RCE
A CVSS 9.1 critical command injection vulnerability in Honeywell's Control Network Module web interface allows remote attackers to execute arbitrary...
- News
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days
This week's ThreatsDay threat roundup covers Microsoft Edge storing passwords in plaintext, industrial control system zero-days under active exploitation,...
- Security
CVE-2026-6284: PLC Brute Force Password Bypass (CVSS 9.1)
A critical vulnerability in a programmable logic controller allows unauthenticated network attackers to brute force weak passwords and gain full...
- Security
CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables
A critical authentication bypass in Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 allows unauthenticated remote attackers to...
- Security
CVE-2026-1579: MAVLink Protocol Unauthenticated Shell Access
A critical CVSS 9.8 vulnerability in the MAVLink drone communication protocol allows unauthenticated attackers to send arbitrary SERIAL_CONTROL commands —...
- News
Cyberattacks on Critical Infrastructure Double in Q1 2026
Dragos and Mandiant report a 112% increase in cyberattacks targeting energy, water, and transportation systems in the first quarter of 2026, with...