[Control systems] ABB security advisory (AV26-163)

Serial number: AV26-163
Date: February 24, 2026

On February 24, 2026, ABB published security advisories to address vulnerabilities in the following products:

• AC500 V3 firmware – versions prior to 3.9.0
• Automation Builder – versions prior to 2.9.0

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• AC500 V3 Multiple vulnerabilities - CVE IDs: CVE-2025-2595, CVE-2025-41659, CVE-2025-41691
• ABB Automation Builder Gateway for Windows with insecure defaults CVE ID: CVE-2024-41975
• ABB Cyber security alerts and notifications