Review – 2 Advisories and 1 Update Published – 3-31-26

 Today CISA’s NCCIC-ICS published two control system security advisories for products from PX4 and Anritsu. They also updated an advisory for products from Mitsubishi Electric. 

Advisories  

PX4 Advisory  This advisory describes a missing authentication for critical function vulnerability in the MAVLink communication protocol in the PX4 Autopilot. 

Anritsu Advisory  This advisory describes a missing authentication for critical function vulnerability in the Anritsu Remote Spectrum Monitor. 

Mitsubishi Update  This update provides additional information on the MELSEC iQ-F Series advisory that was originally published on November 19th, 2025. 

For more information on these advisories, see my article at CFSN Detailed Analysis - - subscription required.