Skip to content
OpenAdvisories
High 3ADR011566 1 CVE

ABB Automation Builder - Deserialization of untrusted data

Published Sep 28, 2026 · Updated Sep 28, 2026

Vendor: ABB Product: Automation Builder

Summary

ABB is aware of vulnerabilities in the products versions listed as affected in the advisory.

Automation Builder could execute arbitrary code by crafting the project file or project archive file.

Vulnerabilities 1

  • High 7.8
    CVE-2025-41700

    CODESYS Development System - Deserialization of Untrusted Data

    An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

    CODESYS CODESYS Development System ICS / OT

Revision history

  1. #1

    Initial version.

References