CISA flags Rockwell Automation ControlFLASH flaw, urges update to 15.08
CISA published an advisory on a Rockwell Automation ControlFLASH vulnerability tracked as CVE-2026-12663 and urged users to update to version 15.08.
Regulatory
CISA warns of three flaws in Tycon Systems TPDIN-Monitor-WEB3
CISA issued an advisory on Tycon Systems’ TPDIN-Monitor-WEB3, citing three vulnerabilities in versions 2.2.9 and prior and pointing to firmware v2.4.2 as the remedy.
CISA flags OPC UA LDS installer flaw, urges update to 1.04.420
CISA published an ICS advisory on Sept. 3, 2026, for a medium-severity flaw in OPCFoundation OPC UA LocalDiscoveryServer installers and urged users to update.
CISA republishes Ignition advisory on blank role setting that can let users create projects
CISA says Inductive Automation Ignition versions 8.1.53 and earlier can allow project creation by authenticated users if a gateway setting is left blank.
CISA republishes Rockwell advisory on 1756-ENBT denial-of-service flaw
CISA republished a Rockwell Automation advisory on a denial-of-service vulnerability in the 1756-ENBT module, urging upgrades to newer hardware.
CISA republishes Schneider Electric advisory on session-hijacking flaw
CISA says a Schneider Electric vulnerability could allow unauthorized access or session hijacking in several industrial control products, and lists fixes and mitigations for affected versions.
SEC investor committee to meet Sept. 10 on AI, Regulation NMS
The SEC said its Investor Advisory Committee will meet Sept. 10 at headquarters in Washington, D.C., with a webcast available on the agency’s website.