Friday, June 26, 2026

Chemical Transportation Incidents – Week of 5-23-26

Reporting Background 

See this post for explanation, with the most recent update here (removed from paywall). 

Data from PHMSA’s online database of transportation related chemical incidents that have been reported to the agency. 

Incidents Summary  

• Number of incidents – 410 (383 highway, 26 air, 1 rail, 0 water) 

• Serious incidents – 0 (0 Bulk release, 0 evacuation, 0 injury, 0 death, 0 major artery closed, 0 fire/explosion, 29 no release)  

• Largest container involved – 25,150-gal DOT 113A90W Railcar {Argon, Refrigerated Liquid (Cryogenic Liquid)} PRV leaking, reset with mallet strike. 

• Largest amount spilled – 110-gal 55-gal metal drums {Adhesives, Containing A Flammable Liquid} Forklift strike during unloading. 

• Total amount reported spilled in all incidents – 995.2-gal 

NOTE: Links above are to Form 5800.1 for the described incidents. 

Most Interesting Chemical: Argon, Refrigerated Liquid (Cryogenic Liquid): A colorless noncombustible liquid. Heavier than air. Contact may cause frostbite. May cause asphyxiation by displacement of air. Prolonged exposure to fire or intense heat may cause the container to rupture violently and rocket. (Source: CameoChemicals.NOAA.gov).  



Short Takes – 6-26-26 - Federal Register Edition

Proposed Information Collection Request; Comment Request; Emergency Planning and Community Right-to-Know Act (EPCRA) Emergency Notifications. EPA 60-day ICR extension notice. Summary: “Only new facilities that may become subject to these requirements must notify the SERC and the LEPC. Currently covered facilities are required to notify the LEPC of any changes that occur at the facility which would be relevant to emergency planning. Section 303 requires the LEPC to prepare local emergency response plans for their planning district using the information provided by facilities under section 302. An LEPC may request any information from facilities necessary to develop emergency response plans. Initial emergency response plans were developed within a few months after the law was passed. LEPCs are required to review and update the plan at least annually or more frequently as changes occur in the community. Section 304 requires facilities to report to SERCs and LEPCs releases in excess of the reportable quantities listed for each EHS. This ICR also covers the notification and the written follow-up required under section 304. The implementing regulations are codified in 40 CFR part 355.” 

Proposed Information Collection Request; Comment Request; Emergency Planning and Community Right to Know Act (EPCRA) and Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA) Continuous Release Reports. EPA 60-day ICR extension notice. Summary: “Continuous Release Reporting (CRR) requires that the person in charge of a vessel or facility immediately notify the National Response Center of a hazardous substance release into the environment if the amount of the release equals or exceeds the substance's reportable quantity (RQ) (found in table 302.4 of 40 CFR 302.4). If the source and chemical composition of the continuous release do not change and the level of the continuous release does not significantly increase, a follow-up written report to EPA Headquarters one year after submission of the initial written report is also required. The person in charge must notify the National Response Center and EPA Headquarters of a change in the source or composition of the release, and under section 103(a) of CERCLA, a significant increase must be reported immediately to the National Response Center. Finally, any change in information submitted in support of a continuous release notification must be reported to EPA Headquarters. 

ADS-Equipped Vehicle Safety, Transparency, and Evaluation Program; Withdrawal. NHTSA NPRM withdrawal notice. Summary: “This action withdraws the notice of proposed rulemaking (NPRM) published in the Federal Register on January 15, 2025, which proposed to establish the Automated Driving System-Equipped Vehicle Safety, Transparency, and Evaluation Program (AV STEP). The proposal would have created a voluntary program for vehicle manufacturers, developers of Automated Driving Systems (ADS), and fleet operators or system integrators of such vehicles. Based on its reevaluation of the proposal, consideration of the comments received, and subsequent progress on other ADS initiatives, NHTSA is withdrawing the rulemaking. 

Federal Motor Vehicle Safety Standards; Modernization of FMVSS No. 135 To Accommodate ADS-Equipped Vehicles. NHTSA notice of proposed rulemaking. Summary: “NHTSA is proposing to amend Federal Motor Vehicle Safety Standard (FMVSS) No. 135, “Light vehicle brake systems.” The proposed modifications would distinguish how regulations apply to vehicles with and without manually operated driving controls. The proposed modifications would clarify definitions, telltale requirements, performance requirements, and test procedures in the standard and remove sections that are no longer relevant. The stopping distance performance requirements, which address the primary safety purpose of the standard, would still apply to all subject vehicles. This rulemaking would remove unnecessary regulatory burdens and costs without detriment to vehicle safety. 

Modernizing Security Requirements. NRC proposed rule and draft guidance. Summary: “The U.S. Nuclear Regulatory Commission (NRC) is proposing to revise its regulations to modernize security and fitness-for-duty requirements to enhance efficiency, consistent with Executive Order 14300, “Ordering the Reform of the Nuclear Regulatory Commission.” The proposed revisions are intended to reduce regulatory burden, where appropriate, while continuing to provide reasonable assurance that safety and security will be adequately maintained at NRC-licensed facilities. 

Thursday, June 25, 2026

Review – 9 Advisories and 1 Update Published – 6-25-26

Today CISA’s NCCIC-ICS published 7 control system security advisories for products from Schneider Electric, Delta Electronics, H.View, Daktronics, Horner Automation, EVoke Systems, and Yokogawa. They also published two medical device security advisories for products from OHIF and pydicom. They also updated an advisory for AzeoTech. 

Advisories  

Schneider Advisory - This advisory describes three vulnerabilities in the Schneider PowerLogic P7. 

Delta Advisory - This advisory describes a deserialization of untrusted data vulnerability in the Delta DTM Soft product. 

H.VIEW Advisory - This advisory describes two vulnerabilities in the H. VIEW HV-500S6 IP Camera. 

Daktronics Advisory - This advisory describes three vulnerabilities in the Daktronics Controller firmware. 

Horner Advisory - This advisory describes an out-of-bounds read vulnerability in the Horner Cscape product. 

EVoke Advisory - This advisory describes four vulnerabilities in the EVoke Charging Station Management System. 

Yokogawa Advisory - This advisory describes a cleartext transmission of sensitive information vulnerability in the Yokogawa FAST/TOOLS and CI Server. 

OHIF Advisory - This advisory describes a server-side request forgery vulnerability in the Open Health Imaging Foundation (OHIF) Viewers DICOM. 

Pydicom Advisory - This advisory describes a path traversal vulnerability in the pydicom pynetdicom Library. 

Updates  

AzeoTech Advisory - This update provides additional information on the DAQFactory advisory that was originally published on June 18th, 2026. 


For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/9-advisories-and-1-update-published - subscription required. 

 
/* Use this with templates/template-twocol.html */