ABB Automation Studio flaws let attackers gain remote access

THE document is an ICS Advisory (ICSA-26-141-03) from CISA regarding vulnerabilities in ABB B&R Automation Studio versions earlier than 6.5. Released on May 21, 2026, the advisory highlights critical vulnerabilities that could lead to unauthorized access and data exposure. Several CVEs are detailed, including critical risks with CVSS scores as high as 9.8. ABB recommends users update to version 6.5 to mitigate these risks and offers guidance for secure system operation. Notably affected products are specified, and users are encouraged to follow security best practices to minimize exploitation risks.