Redis has a use-after-free vulnerability in the tlsProcessPendingData() function, which manages the TLS pending-data list when TLS support is enabled. This flaw allows a remote, unauthenticated attacker to potentially execute arbitrary commands with the privileges of the Redis server. The vulnerability affects multiple specific Redis package versions. The CVSS score is 7.1, indicating a medium severity level.
CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
A vulnerability identified as CVE-2026-21661 affects Johnson Controls CEM AC2000 version 12.0. The Cybersecurity and Infrastructure Security Agency (CISA) recommends users implement defensive measures to reduce the risk of exploitation. No specific technical details, CVSS score, or known exploits are currently available.
CVE-2025-3756 affects ABB System 800xA and Symphony Plus IEC 61850 products, specifically version CI868. CISA recommends defensive measures to reduce exploitation risk, but no specific technical details or CVSS score are provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2025-13777 is a vulnerability affecting ABB AWIN Gateways, specifically version GW120. The Cybersecurity and Infrastructure Security Agency (CISA) recommends users implement defensive measures to reduce the risk of exploitation. No CVSS score or detailed technical impact information is provided. No known exploits are reported in the wild, and no patch or official fix is currently documented.
A vulnerability affecting Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP and Ethernet modules (versions up to 1.106) has been identified. CISA recommends minimizing network exposure of these control system devices by isolating them behind firewalls and avoiding direct internet access. Secure remote access methods such as VPNs should be used, with the caveat that VPNs themselves must be kept up to date. No public exploit code or active exploitation has been reported. No CVSS score is available for this vulnerability.
CVE-2026-0936 affects ABB B&R PVI software and involves vulnerabilities that CISA has identified as requiring defensive measures to reduce exploitation risk. The vulnerability is addressed in version 6.5.0.
CVE-2025-11043 is a vulnerability affecting ABB B&R Automation Studio versions prior to and including 6.5. The vulnerability is associated with CWE-295, which relates to improper certificate validation. CISA recommends users implement defensive measures to reduce exploitation risk. A fix is available in version 6.5.
Multiple vulnerabilities affecting ABB B&R Automation Runtime prior to version 6.5 have been identified. CISA recommends users implement defensive measures to reduce exploitation risk. Version 6.5 contains fixes for these vulnerabilities.
CVE-2025-14510 affects ABB Ability OPTIMAX version 6.1 and is recognized by CISA as a vulnerability requiring defensive measures to reduce exploitation risk. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. No patch or remediation details are available from the input data.
CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services (WSUS) affecting versions from Windows Server 2012 through 2025 with the WSUS role enabled. It allows unauthenticated attackers to execute code with system privileges by targeting WSUS instances exposed on ports 8530 and 8531. Initial patches released on October 14, 2025, were incomplete, requiring an emergency update on October 23. Exploitation has been observed shortly after patch release, with attackers using malicious PowerShell commands for reconnaissance and data exfiltration. Approximately 5,500 WSUS instances are exposed globally, posing a significant risk, especially to European organizations. The vulnerability facilitates initial access and lateral movement within networks. Immediate patching and reducing network exposure are critical to mitigate this threat.
CVE-2025-10571 affects ABB Edgenius Management Portal versions 3.2.0.0 and 3.2.2.0 and is associated with CWE-288 (Authentication Bypass). CISA recommends users implement defensive measures to reduce exploitation risk. No CVSS score or detailed impact information is provided. No known exploits in the wild or patch information is available.
A vulnerability identified as CVE-2025-12556 affects the IDIS ICM Viewer version 1.6.0.10. The Cybersecurity and Infrastructure Security Agency (CISA) recommends users implement defensive measures to reduce the risk of exploitation. No specific details about the nature of the vulnerability or its impact are provided.
