Review – 1 Advisory and 2 Updates Published – 3-5-26

Today CISA’s NCCIC-ICS published one control system security advisory for products from Delta Electronics. They also updated advisories for products from Johnson Controls and Universal Boot Loader.

Advisories

Delta Advisory - This advisory describes an out-of-bounds write vulnerability in the Delta CNCSoft-G2 devices.

Updates

Johnson Controls Update - This update provides additional information on the PowerG advisory that was originally published on December 16^th, 2025.

U-Boot Update - This update provides additional information on the U-Boot advisory that was originally published on December 9^th, 2025.

 

For more information on these advisories, including a down-the-rabbit-hole look at outdated operating systems, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-and-2-updates-published-e73 - subscription required.