A local attacker who successfully exploited this vulnerability could gain elevated privileges by Path Traversal, arbitrarily reading files of system, to cause confidentiality impact of system files.

ABB is aware of vulnerabilities in the products versions listed as affected in the advisory.

Automation Builder could execute arbitrary code by crafting the project file or project archive file.

An update is available that resolves publicly reported vulnerability in the products versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could cause a denial-of-service (DoS).

ABB is aware of a privately reported vulnerability affecting the PCM600 project import functionality. An update is available that resolves this vulnerability in the affected product versions.

A specially crafted PCM600 project archive may exploit insufficient validation of archive entry paths during project import. Successful exploitation could allow an attacker to create or overwrite files outside the intended extraction directory using the permissions of the importing user.

ABB is aware of a reported vulnerability in ABB Protection and Control IED Manager (PCM600).

A local authenticated user belonging to the PCM600 user group may be able to modify the configuration of a Windows service running with SYSTEM privileges. Successful exploitation could allow an attacker to execute arbitrary commands with elevated privileges on the affected workstation.

Note: This document references the ABBPCMSchedulerService_v214 component as implemented in PCM600 versi…

ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An update is available that resolves the reported vulnerability in the product versions under maintenance.

An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.

ABB is aware of public reports of a vulnerability in the product listed as affected in the advisory. An update has been deployed to the cloud system that resolves a publicly reported vulnerability in the product versions listed above.

An attacker who successfully exploited this vulnerability could take remote control of the product.

The vulnerability has been identified in the keycloak authentication component which is integrated into dynovaPRO™. The vulnerability exists in the …

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could

- Allow arbitrary files to be deleted with system privileges (CVE-2026-81572), - Read potentially sensitive configuration data and overwrite selected values in Server.ini (CVE-2026-81573) - Crash CodeMeter and disclose sensitive information such as process memory and stack canar-ies (…

ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used within affected ABB zenon Software Platform installations for software licensing and license server functionality. Successful exploitation of the reported vulnerabilities could enable local privilege escalation on Windows systems and impact s…

An update is available that resolves a vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient entropy of authenticators used by mapp Audit.