ABB (Vendor): news timeline & CVEs

[Control systems] ABB security advisory (AV26-942)

Canada's Cyber Centre relayed ABB advisory AV26-942 addressing CVE-2023-5778, a missing length check flaw in Freelance Controller industrial devices.

The Canadian Centre for Cyber Security published advisory AV26-942 on September 18, 2026, noting that ABB released a security advisory addressing vulnerabilities in the Freelance Controller product line, affecting multiple versions and models. The cited flaw is CVE-2023-5778, described as a missing length check. The Cyber Centre encourages users and administrators to review ABB's advisory and apply updates as they become available.

Canadian Centre for Cyber SecuritySep 18, 17:52 UTC · 8d agoAdvisory CVE-2023-5778

ABB Ability Edgenius

CISA's ABB advisory covers CVE-2026-31431, a public Linux kernel flaw letting local users or compromised containers gain root on Ability Edgenius gateways.

ABB confirmed that CVE-2026-31431 (Copy Fail), a Linux kernel flaw in the algif_aead cryptographic interface (CWE-669), affects Ability Edgenius versions 3.2.0.0 to below 3.2.4.1 on bE100 gateways. A locally authenticated user or compromised container workload can gain root privileges, enabling arbitrary code execution or denial of service on the node. CVSS v3.1 score is 7.8, and the flaw impacts kernels shipped in most major Linux distributions since 2017. A fix is available and ABB reported no exploitation of Edgenius when the advisory was issued.

CISA AdvisoriesSep 17, 12:00 UTC · 9d agoAdvisory CVE-2026-31431

ABB

Timeline2 articles

Related CVEsby mentions

Appears with

[Control systems] ABB security advisory (AV26-942)

ABB Ability Edgenius