[Control systems] B&R security advisory (AV26-056)

Serial number: AV26-056
Date: January 26, 2026

On January 19, 2026, B&R published ICS advisories to address vulnerabilities in the following products:

• Automation Runtime 6 versions – versions prior to 6.5
• Automation Runtime 4 versions – versions prior to R4.93
• Automation Studio – versions prior to 6.5

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• SA25P005: Improper Handling of Flooding conditions on ANSL Server
• SA25P004: Automation Studio Insufficient Server Certificate Validation
• B&R Cyber Security Advisories and Notices