✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Critical Manufacturing
Breach intelligence, attack campaigns, and threat reports targeting the Critical Manufacturing sector.
Explore Other Sectors
Critical Manufacturing Threat Reports
Critical Vulnerability in Siemens Mendix Runtime: CVE-2026-7891
In July 2026, a critical vulnerability (CVE-2026-7891) was identified in Siemens Mendix Runtime, affecting all versions. The issue stems from inadequate documentation regarding the special behavior of the System.User entity, leading developers to potentially configure overly permissive access rules. This misconfiguration can result in unauthorized access to sensitive user data and privilege escalation within Mendix applications. Siemens has advised developers to review and update their access rules based on the revised documentation to mitigate this risk. This incident underscores the importance of comprehensive documentation and secure configuration practices in application development. As similar vulnerabilities continue to emerge, organizations must prioritize regular security assessments and adhere to best practices to prevent unauthorized data exposure and maintain compliance with regulatory standards.
1 week ago
Kill Chain
Critical Vulnerabilities in Panduit IntraVUE Threaten Industrial Control Systems
In July 2026, multiple critical vulnerabilities were identified in Panduit IntraVUE versions up to 3.2.1a14. These vulnerabilities include plaintext storage of passwords, unintended proxy usage, exposure of sensitive system information, and inadequate encryption strength. Exploitation could allow attackers to manipulate industrial control devices remotely without physical access or specialized knowledge, posing significant risks to critical infrastructure sectors such as manufacturing, energy, and water systems. The discovery of these vulnerabilities underscores the ongoing challenges in securing industrial control systems. As cyber threats targeting critical infrastructure continue to evolve, organizations must prioritize timely vulnerability management and adopt robust security measures to mitigate potential risks.
2 weeks ago
Kill Chain
Critical Vulnerabilities Discovered in Johnson Controls' C-CURE 9000 and Victor Application Servers
In July 2026, multiple critical vulnerabilities were identified in Johnson Controls' C-CURE 9000 and Victor application servers, widely used in physical security management. These vulnerabilities, including CVE-2026-21655, CVE-2026-21653, and CVE-2026-34496, could allow unauthenticated attackers to execute arbitrary code, perform server-side request forgery, and escalate privileges, potentially compromising physical security systems and sensitive data. ([johnsoncontrols.com](https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories?utm_source=openai)) The discovery of these vulnerabilities underscores the increasing targeting of critical infrastructure by cyber threats. Organizations must prioritize patching and implementing robust security measures to protect against such exploits, as the exploitation of these flaws could lead to significant operational disruptions and security breaches.
2 weeks ago
Kill Chain
Siemens RUGGEDCOM APE1808 Vulnerabilities: What You Need to Know
In July 2026, Siemens disclosed multiple vulnerabilities in its RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW. These vulnerabilities include cross-site scripting (CVE-2026-0266), privilege escalation (CVE-2026-0272), and command injection (CVE-2026-0273). Exploitation could allow authenticated administrators to execute arbitrary commands with root privileges, potentially compromising system integrity. Siemens has advised customers to consult Palo Alto Networks' security notifications for workarounds and to contact customer support for patch information. This incident underscores the critical importance of timely vulnerability management in industrial control systems. Organizations should prioritize applying patches and implementing recommended security measures to mitigate risks associated with these vulnerabilities.
2 weeks ago
Kill Chain
Critical Security Flaws Discovered in Tycon Systems TPDIN-Monitor-WEB2 Devices
In July 2026, critical vulnerabilities were identified in Tycon Systems' TPDIN-Monitor-WEB2 devices, specifically affecting firmware version 2.3.9. The vulnerabilities, CVE-2026-61884 and CVE-2026-55985, allow unauthenticated remote attackers to bypass authentication and access sensitive credentials stored in cleartext. Exploitation of these flaws could lead to unauthorized control over device functions, disruption of connected infrastructure, and potential physical safety risks. ([windowsforum.com](https://windowsforum.com/threads/tycon-tpdin-monitor-web2-2-3-9-fix-critical-9-8-flaws.439865/?utm_source=openai)) This incident underscores the pressing need for robust security measures in industrial control systems, especially those deployed in critical manufacturing sectors worldwide. Organizations must prioritize timely firmware updates, network segmentation, and secure remote access protocols to mitigate such vulnerabilities.
2 weeks ago
Kill Chain
Schneider Electric PowerLogic P7 Vulnerabilities Disclosed in 2026
In June 2026, Schneider Electric disclosed multiple vulnerabilities in its PowerLogic™ P7 product, including CVE-2026-9716 (NULL Pointer Dereference), CVE-2026-9717 (OS Command Injection), and CVE-2026-9718 (Reachable Assertion). These vulnerabilities could lead to denial-of-service conditions, unauthorized command execution, and system instability. Affected versions include PowerLogic™ P7 version 0.2.003.001.000 and prior. Schneider Electric has released firmware version V02.004.001 to address these issues. Organizations are advised to apply the update promptly to mitigate potential risks. ([radar.offseq.com](https://radar.offseq.com/threat/multiple-vulnerabilities-on-powerlogic-p7-e233bd41?utm_source=openai)) The disclosure underscores the critical importance of timely vulnerability management in industrial control systems. As cyber threats targeting critical infrastructure continue to evolve, maintaining up-to-date systems and adhering to cybersecurity best practices are essential to safeguard operational integrity and prevent potential disruptions.
1 month ago
Kill Chain
Siemens SIPROTEC 5 Vulnerability Exposes Critical Infrastructure to Potential Attacks
In June 2026, Siemens disclosed a vulnerability (CVE-2025-40808) in its SIPROTEC 5 devices, which are critical components in energy and industrial sectors. The flaw allows authenticated users to upload arbitrary files via the DIGSI 5 protocol, potentially leading to denial-of-service conditions or remote code execution. Siemens has released firmware updates to address this issue and recommends users upgrade to the latest versions to mitigate the risk. This incident underscores the importance of securing industrial control systems against authenticated insider threats. As cyberattacks targeting critical infrastructure become more sophisticated, organizations must prioritize timely patching and robust access controls to safeguard operational technology environments.
1 month ago
Kill Chain
Critical Security Flaws Discovered in Brickcom Cameras
In June 2026, critical vulnerabilities were identified in Brickcom cameras, specifically models Cube, Dome, Bullet, and Box version 3.2.3.5.6. These flaws, cataloged as CVE-2026-50245 and CVE-2026-50005, allow unauthenticated remote attackers to access live video feeds and still images via the /ONVIF endpoint without requiring authentication. Additionally, the use of default credentials enables silent access to camera feeds, compromising sensitive visual information and potentially granting administrative control over the devices. The exploitation of these vulnerabilities poses significant risks to sectors such as Commercial Facilities, Critical Manufacturing, Financial Services, and Healthcare, where surveillance systems are integral to security operations. The absence of authentication mechanisms in these cameras underscores the critical need for robust access controls and regular security assessments to prevent unauthorized access and data breaches.
1 month ago
Kill Chain
Critical Vulnerability in Schneider Electric's EcoStruxure Panel Server Devices (CVE-2026-6866)
In May 2026, Schneider Electric disclosed a vulnerability (CVE-2026-6866) in its EcoStruxure Panel Server devices, including models PAS400, PAS600, PAS600V2, PAS800, and PAS800V2, running firmware versions 002.005.000 and prior. This flaw, identified as CWE-1188, allows device credentials to revert to factory defaults under rare conditions, potentially enabling unauthorized access to operational technology (OT) networks. The vulnerability poses a significant risk to critical infrastructure sectors such as energy, utilities, and manufacturing, as it could lead to unauthorized disclosure of sensitive information. Schneider Electric has released firmware version 002.006.000 to address this issue. Organizations are urged to apply this update promptly to mitigate potential security breaches. ([techjacksolutions.com](https://techjacksolutions.com/scc-intel/schneider-electric-ecostruxure-panel-server-credential-reset-flaw-exposes-ot-gateways-in-critical-infrastructure/?utm_source=openai)) The incident underscores the importance of maintaining up-to-date firmware and implementing robust access controls in OT environments. As cyber threats targeting industrial control systems continue to evolve, ensuring the security of gateway devices like the EcoStruxure Panel Server is crucial to prevent unauthorized access and protect critical infrastructure.
2 months ago
Kill Chain
Critical XSS Vulnerability in CP Plus NVRs: CVE-2026-6824
In May 2026, a critical stored Cross-Site Scripting (XSS) vulnerability, identified as CVE-2026-6824, was discovered in CP Plus 8 Channel Network Video Recorders (NVRs). This flaw allows attackers to inject malicious scripts into the device's web interface, which execute in the browsers of authenticated users or administrators upon access. Exploitation can lead to session hijacking, unauthorized actions, data exposure, and compromise of system integrity. The affected versions include CP-UNR-108F1 Hardware V1.0, Web V3.2.7.128806, and System V4.001.00AT009.0.R. ([socdefenders.ai](https://www.socdefenders.ai/item/a70ca9af-a0bb-4b2f-9cf8-a89beb76b2b9?utm_source=openai)) This incident underscores the persistent threat posed by web-based vulnerabilities in critical infrastructure devices. As attackers increasingly target such systems, organizations must prioritize regular security assessments, timely patching, and adherence to best practices to mitigate risks associated with similar vulnerabilities.
2 months ago
Kill Chain
Critical OpenSSL Vulnerability in Hitachi Energy's GMS600: CVE-2022-4304
In 2023, Hitachi Energy identified a vulnerability (CVE-2022-4304) in its GMS600 versions 1.3.0 and 1.3.1, stemming from a timing-based side channel in the OpenSSL RSA decryption implementation. This flaw could potentially allow attackers to recover plaintext across a network through a Bleichenbacher-style attack, necessitating the transmission of a large number of trial messages. Successful exploitation could lead to the decryption of sensitive application data transmitted over TLS connections. ([cve.mitre.org](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304&utm_source=openai)) This incident underscores the critical importance of promptly addressing vulnerabilities in widely used cryptographic libraries like OpenSSL. Organizations must remain vigilant, as similar flaws can have far-reaching implications across various products and industries, emphasizing the need for continuous monitoring and timely patching to maintain robust cybersecurity defenses.
2 months ago
Kill Chain
Critical Vulnerability in Palo Alto Networks PAN-OS: CVE-2026-0300
In May 2026, a critical buffer overflow vulnerability (CVE-2026-0300) was identified in the User-ID™ Authentication Portal service of Palo Alto Networks PAN-OS software. This flaw allows unauthenticated attackers to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls by sending specially crafted packets. The vulnerability affects PAN-OS versions prior to 12.1.4-h5, 11.2.4-h17, 11.1.4-h33, and 10.2.7-h34. Exploitation has been observed in the wild, primarily targeting systems with the Authentication Portal exposed to untrusted networks. ([security.paloaltonetworks.com](https://security.paloaltonetworks.com/CVE-2026-0300?utm_source=openai)) The incident underscores the importance of securing network access to critical services and adhering to best practice guidelines. Organizations are advised to restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses and apply the necessary software updates promptly to mitigate potential risks. ([security.paloaltonetworks.com](https://security.paloaltonetworks.com/CVE-2026-0300?utm_source=openai))
2 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports