Multiple ICS Vulnerabilities Enable RCE and Takeover | Threat Intel Reports

Multiple high-severity vulnerabilities have been identified across Honeywell CCTV Products, GE Vernova Enervista UR Setup, Delta Electronics ASDA-Soft, and Siemens Simcenter Femap and Nastran. Successful exploitation could lead to account takeover, unauthorised access, remote code execution (RCE), buffer overflows, file system manipulation, or application crashes.

CVE-2026-1670 CVE-2026-1762 CVE-2026-1763 CVE-2026-1361 CVE-2026-23715–CVE-2026-23720

Targeting / Delivery Mechanism

Internet-facing systems, exposed management interfaces, and environments where users handle untrusted files present elevated risk.

Persistence / Deployment

Successful exploitation could allow attackers to gain administrative access, execute arbitrary code, manipulate system configurations, access surveillance feeds, or maintain persistence within operational technology environments.

Severity ranges from High to Critical (CVSS up to 9.8). Exploitation may result in surveillance system compromise, elevated privilege execution, integrity violations, and disruption of industrial or engineering operations.

Identify affected product versions:

Review logs for unauthorised account changes, suspicious file activity, unexpected crashes, or abnormal administrative execution.

Respond to Confirmed Compromise

Isolate affected systems. Reset compromised credentials, particularly recovery email accounts in Honeywell deployments. Reinstall or upgrade impacted software. Conduct forensic review of file systems and user activity.

Strengthen Preventative Controls

Apply vendor patches immediately:

Restrict administrative access, enforce file integrity monitoring, and prevent users from opening untrusted NDB, XDB, or .par files.