https://exploit-radar.com/en/flux/categories/ot.xml Exploit Radar: Industrial and building systems The latest additions to CISA’s catalog of exploited vulnerabilities in the “Industrial and building systems” category (indicative classification). 2026-07-15T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2023-4346/ CVE-2023-4346 — KNX Association Protocole KNX 2026-07-15T00:00:00Z Apply the patches or mitigations from KNX Association; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on July 15, 2026. https://exploit-radar.com/en/cve/CVE-2025-67038/ CVE-2025-67038 — Lantronix EDS5000 2026-06-23T00:00:00Z Apply the patches or mitigations from Lantronix; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 23, 2026. https://exploit-radar.com/en/cve/CVE-2021-22681/ CVE-2021-22681 — Rockwell Automation Logix (PLCs, Studio 5000) 2026-03-05T00:00:00Z Apply the patches or mitigations from Rockwell Automation; if none are available, stop using the product. For cloud services, follow the guidance from Rockwell Automation. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 5, 2026. https://exploit-radar.com/en/cve/CVE-2021-26828/ CVE-2021-26828 — OpenPLC ScadaBR 2025-12-03T00:00:00Z Apply the patches or mitigations from OpenPLC; if none are available, stop using the product. For cloud services, follow the guidance from OpenPLC. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 3, 2025. https://exploit-radar.com/en/cve/CVE-2021-26829/ CVE-2021-26829 — OpenPLC ScadaBR 2025-11-28T00:00:00Z Apply the patches or mitigations from OpenPLC; if none are available, stop using the product. For cloud services, follow the guidance from OpenPLC. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 28, 2025. https://exploit-radar.com/en/cve/CVE-2023-38950/ CVE-2023-38950 — ZKTeco BioTime 2025-05-19T00:00:00Z Apply the patches or mitigations from ZKTeco; if none are available, stop using the product. For cloud services, follow the guidance from ZKTeco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2022-23748/ CVE-2022-23748 — Audinate Dante Discovery 2025-02-06T00:00:00Z Apply the patches or mitigations from Audinate; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 6, 2025. https://exploit-radar.com/en/cve/CVE-2019-7256/ CVE-2019-7256 — Nice (Linear) Linear eMerge E3-Series 2024-03-25T00:00:00Z Specific CISA instructions: see the vulnerability page. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2024. https://exploit-radar.com/en/cve/CVE-2021-36380/ CVE-2021-36380 — Sunhillo SureLine 2024-03-05T00:00:00Z Apply the patches or mitigations from Sunhillo; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 5, 2024. https://exploit-radar.com/en/cve/CVE-2023-6448/ CVE-2023-6448 — Unitronics Vision PLC and HMI 2023-12-11T00:00:00Z Apply the patches or mitigations from Unitronics; if none are available, stop using the product. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 11, 2023. https://exploit-radar.com/en/cve/CVE-2022-29303/ CVE-2022-29303 — CONTEC (SolarView) SolarView Compact 2023-07-13T00:00:00Z Apply the update from CONTEC (SolarView); if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 13, 2023. https://exploit-radar.com/en/cve/CVE-2021-38406/ CVE-2021-38406 — Delta Electronics DOPSoft 2 2022-08-25T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on August 25, 2022. https://exploit-radar.com/en/cve/CVE-2014-0780/ CVE-2014-0780 — InduSoft Web Studio 2022-04-15T00:00:00Z Apply the security update from InduSoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 15, 2022. https://exploit-radar.com/en/cve/CVE-2019-3929/ CVE-2019-3929 — Crestron AirMedia (AM-100, AM-101) 2022-04-15T00:00:00Z Apply the security update from Crestron. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 15, 2022. https://exploit-radar.com/en/cve/CVE-2016-4523/ CVE-2016-4523 — Trihedral VTScada (formerly VTS) 2022-04-15T00:00:00Z Apply the security update from Trihedral. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 15, 2022. https://exploit-radar.com/en/cve/CVE-2018-7841/ CVE-2018-7841 — Schneider Electric U.motion Builder 2022-04-15T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on April 15, 2022. https://exploit-radar.com/en/cve/CVE-2016-8562/ CVE-2016-8562 — Siemens SIMATIC CP 2022-03-03T00:00:00Z Apply the security update from Siemens. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022.