Multiple Vulnerabilities in Industrial Control Systems - 22nd July 2026

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-9108, CVE-2026-9127, CVE-2026-9128, CVE-2026-10573

July 21, 2026

Executive Summary

Multiple CVEs covering path traversal, remote code execution, denial of service, authentication bypass, and privilege escalation across OT products from two major vendors.

Key Details

Affected Platform

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

Rockwell Automation Studio 5000 Logix Designer, 1734 POINT I/O, 1718/1719-AENTR; Siemens CADRA, IAM Client, SIDIS SmartPlug, Opcenter X, RUGGEDCOM APE1808; Tycon Systems TPDIN-Monitor-WEB2.

Operational Impact

Arbitrary code execution and denial of service conditions on industrial programming and control infrastructure. POINT I/O DoS requires device restart to recover.

Technical Root Cause

Studio 5000 flaws include path traversal in ACD project files, incorrect authorisation on configuration files, and unquoted search paths enabling executable hijacking.

Recommended Mitigation

Upgrade Studio 5000 Logix Designer to fixed versions per Rockwell advisory.
Migrate 1734 POINT I/O to 5034-OB8.
Apply Siemens patches per individual product advisories.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore MDR for OT

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Rockwell Automation Security Advisories, Siemens ProductCERT Advisories, CISA ICS Advisories, CVE-2026-9108, CVE-2026-9127, CVE-2026-9128, CVE-2026-10573