Review – 5 Advisories and 1 Updated Published – 10-20-26

Today, CISA’s NCCIC-ICS published five control system security advisories for products from Hitachi Energy (2), Moxa, WAGO, HMS. They also published an update for products from Hitachi Energy. 

Advisories  

Hitachi Energy Advisory #1 - This advisory discusses nine vulnerabilities in the Hitachi Energy RTU500 series CMU Firmware. These are third-party vulnerabilities; six have publicly available exploits. 

Hitachi Energy Advisory #2 - This advisory describes three vulnerabilities in the Hitachi Energy MicroSCADA X SYS600 product. The vulnerabilities were reported to CISA by Zachary Andrew Wagner, Steven Nicolais, and Timotius Oetnung of the Sandia National Laboratories (CyTRICS program). 

Moxa Advisory - This advisory describes two vulnerabilities in the Moxa AIG-302 ThingsPro Edge. The vulnerabilities were reported to CISA by Ievgen Bondarenko. 

WAGO Advisory - The link for this advisory does not currently work. 

HMS Advisory - This advisory describes six vulnerabilities in the HMS Networks PEAK-System PCAN Windows drivers. The vulnerabilities were reported to CISA by Seyeon Bang. 

Updates 

Hitachi Energy Update - This update provides additional information on the RTU500 Product advisory that was originally published on March 3rd, 2026. The new information includes updating the fixed version for v12.7.8 and v13.8.2. 

For more information on these advisories, including a DTRH look at publicly available exploits and missing Siemens advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/5-advisories-and-1-updated-published - subscription required.