industrial-control-system-vulnerabilitywidely-deployed-product-advisoryembedded-device-vulnerabilityinternet-facing-service-vulnerability

Critical ICS Flaws Patched in Siemens, Schneider, Phoenix Contact, and Honeywell Products

Vulnerability Disclosure · 4 sources · Updated 3mo ago · First seen Aug 12, 2026

Siemens, Schneider Electric, Phoenix Contact, and Honeywell published security advisories for industrial control and building management products, with Siemens disclosing the most severe issues. Siemens released 10 advisories covering multiple products, including a maximum-severity missing-authentication flaw in SIMATIC IoT2050 Advanced that could enable remote unauthenticated code execution with elevated privileges, and a critical code-execution vulnerability in Siveillance Video Management Servers. Additional Siemens updates addressed 13 high-severity flaws affecting products such as Simcenter Femap, Solid Edge SE2025/SE2026, Parasolid, Simcenter Nastran, and Siemens License Server, where exploitation could allow arbitrary code execution or arbitrary file read.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

6 events · Aug 2026

Aug 2026
CISA publishes three new ICS advisories
CISA published three new advisories covering Pulsetto products, Mira products from Quanovate Tech, and Johnson Controls products. These advisories were noted alongside the August 2026 ICS Patch Tuesday disclosures.
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact - SecurityWeek
Aug 2026
Phoenix Contact publishes PLCnext firmware vulnerability advisory
Phoenix Contact released an advisory for multiple vulnerabilities in PLCnext firmware. The flaws could allow unauthenticated attackers to cause denial of service, trigger unexpected behavior, or execute malicious SQL queries.
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact - SecurityWeek
Aug 2026
Schneider Electric issues two August 2026 ICS advisories
Schneider Electric published two new advisories covering NetBotz 5 and PowerChute Serial Shutdown. The fixes address code or command execution issues in NetBotz 5 and an excessive-authentication-attempts flaw in PowerChute Serial Shutdown that could lead to disruption or access to system data.
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact - SecurityWeek
Aug 2026
Siemens fixes critical flaw in Siveillance Video Management Servers
As part of its August 2026 ICS Patch Tuesday advisories, Siemens fixed a critical code execution vulnerability affecting Siveillance Video Management Servers. SecurityWeek identified this as one of the notable critical issues in the release.
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact - SecurityWeek
Aug 2026
Siemens releases August 2026 security updates for multiple products
Siemens released security updates addressing multiple vulnerabilities across products including SIMATIC IoT2050 Advanced, Simcenter Femap, Solid Edge, Parasolid, Simcenter Nastran, and Siemens License Server. The updates include one critical and multiple high-severity flaws that could enable arbitrary code execution or arbitrary file read.
Aggiornamenti per prodotti Siemens - ACN
Date unknown
Honeywell publishes building management system advisories
Honeywell published several advisories for building management system products, as noted in the August 2026 ICS Patch Tuesday coverage. The referenced Honeywell page is a security patch testing notices page for Pro-Watch and MAXPRO software.
Honeywell Pro-Watch® and MAXPRO® Software Security Patch Testing Notices

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Affected products

7 linked

Solid EdgeParasolidSimcenter NastranSimcenter FemapSolid Edge Se2025Solid Edge Se2026Simatic Iot2050 Advanced

Organizations

4 linked

HoneywellPhoenix ContactSchneider ElectricSiemens

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

4 references tracked. Mallory keeps watching after this page renders.

Ca CcsNews · Aug 12, 2026

[Control Systems] Phoenix Contact security advisory (AV26-811) - Canadian Centre for Cyber SecurityOpen source ↗

Security WeekNews · Aug 12, 2026

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact - SecurityWeekOpen source ↗

Csirt ItaliaNews · Aug 11, 2026

Aggiornamenti per prodotti Siemens - ACNOpen source ↗

UnclassifiedNews

Honeywell Pro-Watch® and MAXPRO® Software Security Patch Testing NoticesOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Critical ICS Flaws Patched in Siemens, Schneider, Phoenix Contact, and Honeywell Products

How this story unfolded

CISA publishes three new ICS advisories

Phoenix Contact publishes PLCnext firmware vulnerability advisory

Schneider Electric issues two August 2026 ICS advisories

Siemens fixes critical flaw in Siveillance Video Management Servers

Siemens releases August 2026 security updates for multiple products

Honeywell publishes building management system advisories

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Critical ICS Flaws Patched in Schneider Electric and Siemens Products

Multiple Critical Vulnerabilities Disclosed in Industrial Control Systems by CISA

Siemens Issues Security Updates for Multiple Industrial and Engineering Products

Critical ICS Flaws Patched in Siemens, Schneider, Phoenix Contact, and Honeywell Products

How this story unfolded

CISA publishes three new ICS advisories

Phoenix Contact publishes PLCnext firmware vulnerability advisory

Schneider Electric issues two August 2026 ICS advisories

Siemens fixes critical flaw in Siveillance Video Management Servers

Siemens releases August 2026 security updates for multiple products

Honeywell publishes building management system advisories

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Critical ICS Flaws Patched in Schneider Electric and Siemens Products

Multiple Critical Vulnerabilities Disclosed in Industrial Control Systems by CISA

Siemens Issues Security Updates for Multiple Industrial and Engineering Products