[Control systems] ABB security advisory (AV26-039)

Serial number: AV26-039
Date: January 19, 2026

On January 19, 2026, ABB published security advisories to address vulnerabilities in the following products:

• Automation Studio – versions prior to 6.5
• Automation Runtime – version 6.5.0 and prior
• Automation Runtime – version R4.93 and prior

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• Automation Studio Insufficient Server Certificate Validation CVE ID: CVE-2025-11043
• B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server CVE ID: CVE-2025-11044
• ABB Cyber security alerts and notifications