Review – 3 Advisories and 2 Updates Published – 10-29-26

Today CISA’s NCCIC-ICS published three control system security advisories for products from Siemens and Hitachi Energy (2). They also updated two advisories for products from Hitachi Energy. 

Advisories  

Hitachi Energy Advisory #1 - This advisory describes two vulnerabilities in the Hitachi Energy CoreTec product. One is a third-party (Linux) vulnerability with publicly available exploit. The vulnerabilities were self-reported.  

Hitachi Energy Advisory #2 - This advisory describes two vulnerabilities in the Hitachi Energy TRO600 series products. The vulnerabilities were self-reported. 

Siemens Advisory - This advisory describes an authentication bypass by capture-replay vulnerability in the Siemens Mendix SAML Module. The vulnerability is self-reported. 

Updates  

Hitachi Energy Update #1 - This update provides additional information on the MSM Product advisory that was originally published on September 30th, 2026. The new information includes updating the remediation recommendation. 

Hitachi Energy Update #2 - This update provides additional information on the PCM600 advisory that was originally published on May 5th, 2026. The new information includes releasing remediation for PCM600 v3.1 SP4. 

For more information on these advisories, as well as DTRH looks at PHP2Shell advisories and public exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/3-advisories-and-2-updates-published-197 - subscription required. NOTE: With the PHP2Shell updates included, free subscribers to CFSN will receive their copy by email on Saturday.