ICS Patch Tuesday: Siemens, Schneider Electric Disclose High-Severity Vulnerabilities and Node2Shell Exposure
Siemens has released nine new security advisories covering ten vulnerabilities across multiple industrial products, including high-severity issues in ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA, PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer. Two of the advisories address the impact of the Node2Shell vulnerability, with exploitation attempts already observed in the wild though no targeted attacks against Siemens products have been confirmed. Schneider Electric published one advisory for a medium-severity flaw in EcoStruxure Power Build Rapsody that could enable arbitrary code execution via malicious files. Germany’s VDE CERT issued eight advisories affecting Beckhoff, MB Connect Line, Helmholz, Weidmueller, Bender, and Ads-Tec products, many involving third-party components such as PHP2Shell. Phoenix Contact, Johnson Controls, and Hitachi Energy also released advisories detailing risks in PLCnext, EasyIO Neo IO Manager, C•CURE 9000, and other systems, with some products lacking available patches.
SecurityWeekNov 11, 2026Translated from English