[Control systems] B&R security advisory (AV26-066)

Serial number: AV26-066
Date: January 29, 2026

On January 29, 2026, B&R published ICS advisories to address vulnerabilities in the following products:

• PVI – versions prior to 6.5.0
• B&R PCs – multiple models and versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• SA24P003: B&R PCs vulnerable to PixieFail attack (PDF)
• SA26P001: Insertion of sensitive Information into PVI Logfile (PDF)
• B&R Cyber Security Advisories and Notices