Critical Airleader Flaw Exposes Systems to Remote Code Execution Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Airleader Vulnerability Enables Remote Code Execution Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) disclosed a critical vulnerability in the Airleader industrial control system on February 12, 2026. Assigned CVE-2026-1358, the flaw has a CVSS v3 score of 9.8 and affects all versions of Airleader, potentially allowing remote code execution attacks across multiple critical infrastructure sectors. 2 sources 73