Chemical Incident Reporting – Week of 5-16-26

NOTE: See here for series background. 

Edison, NJ – 5-17-26  

Local News Report: Here, here, and here. 

There was an accident involving a fuel tanker that resulted in a massive fire. One person was killed and another was seriously injured and transported to the hospital. 

Not CSB reportable, transportation related incident. 

Belton, SC – 5-20-26  

Local News Report: Here, here, and here. 

There was a toxic vapor cloud released inside a business when sulfuric acid and bleach were mixed. No injuries or damages were reported. 

Not CSB reportable. 

Garden Grove, CA – 5-21-26  

Local News Report: Here, here, here, and here. 

There is an ongoing chemical incident at a chemical manufacturing facility. A methyl-methacrylate tank is undergoing a self-polymerization reaction. So far, there has been some periodic tank venting of the slightly toxic material as the exothermic reaction has raised the temperature and pressure within the tank. As the reaction proceeds, the temperature continues to increase, which increases the rate of reaction. The concern is that at some point the temperature and pressure will increase to the point that there will be a catastrophic failure of the storage tank leading to a large release of hot, flammable, toxic material. No injuries or damages have yet been reported, but 40,000 people have been evacuated from a large area around the facility. 

Not yet CSB reportable. 

St Louis, MO – 5-21-26  

Local News Report: Here, here, and here. 

There was an anhydrous ammonia leak from a food storage facility. No injuries or damages were reported. 

Not CSB reportable. 

Review – Bills Introduced – 5-22-26

 With both the House and Senate meeting in pro forma session (starting their Memorial Day district period), there were 19 bills introduced. Two of those bills will receive additional coverage here. 

HR 9010 Making appropriations for the Legislative Branch for the fiscal year ending September 30, 2027, and for other purposes. Valadao, David G. [Rep.-R-CA-22]   

HR 9022 Energy and Water Development and Related Agencies Appropriations Act, 2027 Fleischmann, Charles J. "Chuck" [Rep.-R-TN-3]   

For more information on these bills, including legislative history for earlier bills, as well as a brief mention-in-passing of a bill for reporting data center power and water use, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/bills-introduced-5-22-26 - subscription required. 

Review – Public ICS Disclosures – Week of 5-16-26 – Part 1

This was a moderately busy disclosure week. We have bulk vendor disclosures from Splunk (15). There are 11 additional vendor disclosures from Arista, Broadcom (4), CODESYS, Hitachi, and HP (4). 

Advisories  

Bulk Vendor Disclosures – Splunk (15). 

Arista Advisory - Arista published an advisory that discusses a use after free vulnerability in multiple Arista products. 

Broadcom Advisory #1 - Broadcom published an advisory that discusses three vulnerabilities (one with publicly available exploits) in their ASCG 3.4.0b for container-tools. 

Broadcom Advisory #2 - Broadcom published an advisory that discusses a path traversal vulnerability (with publicly available exploit) in their Brocade ASCG product. 

Broadcom Advisory #3 - Broadcom published an advisory that discusses eleven vulnerabilities (four with publicly available exploits) in their Brocade ASCG3.4.0b Base OS. 

Broadcom Advisory #4 - Broadcom published an advisory that discusses 33 vulnerabilities in their Brocade ASCG3.4.0b Base OS. 

CODESYS Advisory - CODESYS published an advisory that describes an insufficiently protected credentials vulnerability in their CODESYS Visualization product. 

Hitachi Advisory - Hitachi published an advisory that discusses 41 vulnerabilities in their Disk Array Systems. 

HP Advisory #1 - HP published an advisory that describes two vulnerabilities in their Linux Imaging and Printing software. 

HP Advisory #2 - HP published an advisory that discusses a use of hard-coded cryptographic key vulnerability in their ZGX Nano G1n AI Station. 

HP Advisory #3 - HP published an advisory that describes an information disclosure vulnerability in their ScanJet Pro and ScanJet Enterprise printers. 

HP Advisory #4 - HP published an advisory that discusses eleven vulnerabilities in multiple HP product lines. 

For more information on these disclosures, including links to 3rd party advisories, researcher reports, and exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/public-ics-disclosures-week-of-5-adf - subscription required.