Skip to content
OpenAdvisories
High 2NGA003144 5 CVEs

ABB AbilityTM zenon Security Risk Due to High-Severity Vulnerabilities in WIBU CodeMeter Runtime

Published Sep 9, 2026 · Updated Sep 9, 2026

Vendor: ABB Vendor: Wibu-Systems Product: AbilityTM zenon Product: CodeMeter Runtime

Summary

ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used within affected ABB zenon Software Platform installations for software licensing and license server functionality. Successful exploitation of the reported vulnerabilities could enable local privilege escalation on Windows systems and impact systems configured as CodeMeter license servers, potentially leading to unauthorized access, service disruption, or loss of system integrity. Refer to the WIBU-Systems advisory for detailed technical information on each vulnerability. Please see the References section for the WIBU-Systems security advisory.

Vulnerabilities 5

  • High 8.6
    CVE-2026-81573

    Improper Access Control in Local-Only Configuration Commands

    If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers.…

    wibu-systems-ag codemeter-runtime
  • High 8.2
    CVE-2026-81574

    Format String Vulnerability in Logger

    In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information su…

    wibu-systems-ag codemeter-runtime
  • High 7.8
    CVE-2026-81572

    Local Privilege Escalation in CodeMeter Runtime on Windows

    In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such…

    wibu-systems-ag codemeter-runtime
  • High 7.7
    CVE-2026-81576

    Improper Authentication of Session Handles

    If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read …

    wibu-systems-ag codemeter-runtime
  • High 7.5
    CVE-2026-81575

    Missing Sanity Checks for Buffer Lengths

    If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segme…

    wibu-systems-ag codemeter-runtime

Revision history

  1. #1

    Initial version.

References

  • ABB CYBERSECURITY ADVISORY - PDF version
    https://search.abb.com/library/Download.aspx?DocumentID=2NGA003144&LanguageCode=en&DocumentPartId=&Action=Launch
  • Security Advisories - Wibu-Systems
    https://www.wibu.com/de/support/security-advisories.html?utm_campaign=9306171-Security%20Newsletter&utm_medium=email&_hsenc=p2ANqtz-8PwlMxVWC-8Brkx3tA3UNUOpOrPpAiLTp_b7zRlKBt24OJ8bKZEY30o2Pmr5BRvIk1UBizOL2pPLchFcu1TfeXLbvthpgHV3mSw0Xehq55-0Qn8Ko&_hsmi=432047421&utm_content=432047421&utm_source=hs_email
  • User Software - Wibu-Systems
    https://www.wibu.com/support/user/user-software.html