Review – 5 Advisories and 2 Updates Published – 5-21-26

Today CISA’s NCCIC-ICS published five control system security advisories for products from ABB (4) and Hitachi Energy. They also updated advisories for products from ABB and Schneider Electric. 

Advisories  

ABB Advisory #1 - This advisory describes three vulnerabilities in the ABB Terra AC Wallbox EV charger. NOTE: I briefly discussed the latest update to the ABB advisory on November 30th, 2025. 

NOTE: I briefly discussed the latest update to the ABB advisory on November 30th, 2025. 

ABB Advisory #2 - This advisory describes three vulnerabilities in the ABB B&R Automation Runtime product. The vulnerability is self-reported. 

ABB Advisory #3 - This advisory discusses 25 vulnerabilities in the ABB B&R Automation Studio. ABB Advisory #4 - This advisory discusses the PixieFail vulnerabilities. 

Hitachi Energy Advisory - This advisory discusses an observable discrepancy vulnerability in the Hitachi Energy GMS600. 

Updates  

ABB Update - This update provides additional information on the Automation Builder advisory that was originally published on May 13th, 2025. 

Schneider Update - This update provides additional information on the EcoStruxure Process Expert advisory that was originally published on January 22nd, 2026. 

NOTE: I briefly listed the latest Schneider update on May 17th, 2026. 

For more information on these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-advisories-and-2-updates-published-7c6 - subscription required.