CISA Advisory: Topotech RCU II+ Missing Authentication Vulnerability (CVE-2026-12562)

Vulnerability Overview Vulnerability Name: Topotech Systems RCU II+ and Multiload II+ Publication Date: July 30, 2026 Alert Code: ICSA-26-211-03 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems CVSS Score: v3 8.8 Vulnerability Type: Missing Critical Function Authentication Impact Scope Affected Versions: - RCU II+ <2025-11-24 (CVE-2026-12562) - Multiload II+ <2025-11-24 (CVE-2026-12562) Critical Infrastructure Sector: Energy Deployment Countries/Regions: Global Company Headquarters Location: United States Mitigation Recommended Practices: - Minimize the network exposure of all control system devices and/or systems, ensuring they are not accessible from the internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - When remote access is required, use more secure remote methods such as Virtual Private Networks (VPN), and recognize that VPNs may contain vulnerabilities; therefore, update to the latest version. - Conduct appropriate impact analysis and risk assessment before deploying countermeasures. - Implement recommended cybersecurity policies to proactively defend ICS assets. - Organizations should follow internal procedures and report suspicious malicious activity to CISA. Additional Information Vulnerability Reporter: Donald Green of Southwest Research Institute Known Public Exploitation: None Remote Exploitability: No Tags Industry: Energy Sector Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Links Related Advisories: - Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module - Johnson Controls OpenBlue Employee - MikroTik RouterOS - Schneider Electric IGSS Feedback Product Survey: Anonymous product survey links provided; feedback is welcome. Footer CISA Central: 1-844-Say-CISA, contact@cisa.dhs.gov Official Links: CISA.gov, Official Website of the U.S. Department of Homeland Security The above is a summary of key information regarding the vulnerability from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

CISA Advisory: Topotech RCU II+ Missing Authentication Vulnerability (CVE-2026-12562)