Multiple ICS Vulnerabilities Enable RCE and Takeover

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-1670, CVE-2026-1762, CVE-2026-1763, CVE-2026-1361, CVE-2026-23715, CVE-2026-23720

February 18, 2026

Executive Summary

Critical flaws in Honeywell, GE, Delta, and Siemens ICS products allow RCE, account takeover, and buffer overflows.

Key Details

Affected Platform

Attack Surface

Recommended Action

Affected Environment

Operational Impact

Severity ranges from High to Critical (CVSS up to 9.8). Exploitation may result in surveillance system compromise, elevated privilege execution, integrity violations, and disruption of industrial or engineering operations.

Technical Root Cause

Recommended Mitigation

Apply vendor patches immediately:

Upgrade GE Enervista to version 8.70 or later
Upgrade Delta ASDA-Soft to v7.2.2.0
Upgrade Siemens Simcenter to version 2512 or later
Contact Honeywell for patch guidance

Restrict administrative access, enforce file integrity monitoring, and prevent users from opening untrusted NDB, XDB, or .par files.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore MDR for OT

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-01
https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-02
https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-03
https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-04