ABB vulnerabilities
227 CVEs and advisories name ABB as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-13599ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
- CVE-2026-17525My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
- CVE-2026-15953Path Traversal During Project Archive Import
- CVE-2026-15952Improper Permission Assignment in Scheduler Service
- CVE-2026-19438Mint Workbench I Path traversal Vulnerability
- CVE-2023-5778Missing Length Check
- CVE-2026-12705Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
- CVE-2025-13162Advant Master Online Builder DLL vulnerability
- CVE-2025-7064Freelance Security Lock – Access to Windows OS
- CVE-2025-14774Communication analysis between the Card Reader and TP2CardReaderService daemon
- CVE-2025-14773Stored Cross-Site Scripting in ABB T-MAC Plus web application
- CVE-2025-14772Broken Access Control in ABB T-MAC Plus web application
- CVE-2025-14771File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site
- CVE-2025-3756Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850
- CVE-2025-13779Configuration Data Spill
- CVE-2025-13778Device Reboot Control
- CVE-2025-13777Authentication Bypass due to Improper Session Validation
- CVE-2025-14510ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
- CVE-2025-4677Idle session timeout is not configured for multiple open ports
- CVE-2025-4676Authentication bypass by brute forcing Authentication Headers
- CVE-2025-4675Improper implementation of Modbus protocol leading to DOS attack
- CVE-2025-12143Stack Memory Corruption Vulnerability
- CVE-2025-10571ABB Ability Edgenius Authentication Bypass
- CVE-2025-12142BSS(Block Started by Symbol) Memory Corruption Vulnerability
- CVE-2025-5517Heap Memory Corruption Vulnerability
- CVE-2025-3465Path Traversal Vulnerability
- CVE-2025-9574Missing Authentication Vulnerability
- CVE-2025-9970Application credential stored in clear text in memory
- CVE-2021-22291EIBPORT Reflected XSS
- CVE-2025-10504Heap Memory Corruption Vulnerability