Decision Insights Threat Desk

CISA includes CVE-2021-26829 OpenPLC ScadaBR XSS vulnerability in its Known Exploited Vulnerabilities Catalog following reports of active exploitation.

CISA added CVE-2025-64446, a Fortinet FortiWeb path traversal flaw, to its Known Exploited Vulnerabilities Catalog amid active exploitation.

CISA issued four advisories on vulnerabilities in industrial control systems including Advantech DeviceOn iEdge and ABB FLXeon Controllers.

CISA updates Akira ransomware advisory outlining new attack methods and defensive patching recommendations.

CISA issued 18 advisories detailing vulnerabilities across multiple Industrial Control Systems products from various vendors.

CISA published six advisories on vulnerabilities in multiple Industrial Control Systems products, prompting review for mitigation.