MZ Automation lib60870 — ICSA-26-211-11
CISA ICS · CISA · ICSA-26-211-11
ID
ICSA-26-211-11
ICSA-26-211-11
Date
Source
CISA ICS
CISA ICS
Vendor
CISA
CISA
Threat
medium
medium
Summary
View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed. The following versions of MZ Automation lib60870 are affected: lib60870 2.4.0 (CVE-2026-61893, CVE-2026-63033) CVSS Vendor Equipment Vulnerabilities v3 6.5 MZ Automation GmbH MZ Automation lib60870 Out-of-bounds Read Background Critical Infrastructure Sectors: Energy, Water and Wastewater, Critical…
Timeline
- Published by source
- 2026-07-30
Risk context
- Reported severity or threat level: medium.
- Review exposure for the affected product or family: ICS Advisory.
Product
ICS Advisory
What to do
General, cautious steps (verify details in the official source):
- Review exposure and plan remediation based on risk and environment.
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.
Official advisory
Evidence and provenance
- Canonical advisory ID
- ICSA-26-211-11
- Source
- CISA ICS
- Vendor
- CISA
- Published by source
- 2026-07-30
- Last source activity
- 2026-07-30
- Additional identifiers
- CVE-2026-61893
- Curated by
- hlukh.ch
Related advisories and connections
These advisories are connected by shared CVE, product, vendor, source, or time signals.