/
← Voltar ao feed
high industrial food and logistics

CERT-FR weekly bulletin W42 2026: refrigeration controller incident, XWEB supervisors and Ivanti Connect Secure CVE-2026-104935

1 fonte(s) · 1 atualização(ões) · publicado 18/10/2026 21:00 · coletado há 6 horas

CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked as CVE-2026-104935. The bulletin is a roundup that points to the full alerts and does not replace them. It gives no technical details, IOCs, attribution or affected version numbers. CERT-FR stresses that every vulnerability in its advisories should be handled in a risk-based action plan and that vendor advisories should be consulted for patches.

Detalhes técnicos

  • Alert 1: security incident targeting remote controllers of refrigeration installations (no details in the bulletin).
  • Alert 2: recommendations for secure use of XWEB supervisors.
  • Alert 3: Ivanti Connect Secure (ICS) vulnerability, CVE-2026-104935, with a dedicated Ivanti security advisory.
  • The bulletin itself provides no exploitation details, IOCs or attribution.

Remediação

  • Read the full CERT-FR alerts for the refrigeration controller incident and the XWEB recommendations.
  • Apply the fixes in the Ivanti security advisory for CVE-2026-104935.
  • Use the vendor advisories to prioritise patching, as the bulletin advises.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 18/10/2026 21:00 · coletado 21/10 12:01 primeiro registro

    CERT-FR weekly bulletin W42 2026: refrigeration controller incident, XWEB supervisors and Ivanti Connect Secure CVE-2026-104935

    ler a análise desta fonte

    CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked as CVE-2026-104935. The bulletin is a roundup that points to the full alerts and does not replace them. It gives no technical details, IOCs, attribution or affected version numbers. CERT-FR stresses that every vulnerability in its advisories should be handled in a risk-based action plan and that vendor advisories should be consulted for patches.

    Technical Details

    • Alert 1: security incident targeting remote controllers of refrigeration installations (no details in the bulletin).
    • Alert 2: recommendations for secure use of XWEB supervisors.
    • Alert 3: Ivanti Connect Secure (ICS) vulnerability, CVE-2026-104935, with a dedicated Ivanti security advisory.
    • The bulletin itself provides no exploitation details, IOCs or attribution.

    Remediation

    • Read the full CERT-FR alerts for the refrigeration controller incident and the XWEB recommendations.
    • Apply the fixes in the Ivanti security advisory for CVE-2026-104935.
    • Use the vendor advisories to prioritise patching, as the bulletin advises.