Skip to content
OpenAdvisories
High 3BHS973333 5 CVEs

AC 800PEC, AC 800PEC ARM, AC 800PEC Tool, Control Terminal (xCT) and AC 800PEC Tool Cheetah Impacted by multiple vulnerabilities in Wibu CodeMeter

Published Sep 10, 2026 · Updated Sep 10, 2026

Vendor: ABB Product: AC 800PEC Product: AC 800PEC ARM Product: AC 800PEC Tool Product: AC 800PEC Tool Cheetah Product: Control Terminal (xCT)

Summary

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could

- Allow arbitrary files to be deleted with system privileges (CVE-2026-81572),
- Read potentially sensitive configuration data and overwrite selected values in Server.ini (CVE-2026-81573)
- Crash CodeMeter and disclose sensitive information such as process memory and stack canar-ies (CVE-2026-81574)
- Crash CodeMeter (CVE-2026-81575), or
- Read potentially sensitive license information (CVE-2026-81576)

Vulnerabilities 5

  • High 8.6
    CVE-2026-81573

    Improper Access Control in Local-Only Configuration Commands

    If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers.…

    wibu-systems-ag codemeter-runtime
  • High 8.2
    CVE-2026-81574

    Format String Vulnerability in Logger

    In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information su…

    wibu-systems-ag codemeter-runtime
  • High 7.8
    CVE-2026-81572

    Local Privilege Escalation in CodeMeter Runtime on Windows

    In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such…

    wibu-systems-ag codemeter-runtime
  • High 7.7
    CVE-2026-81576

    Improper Authentication of Session Handles

    If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read …

    wibu-systems-ag codemeter-runtime
  • High 7.5
    CVE-2026-81575

    Missing Sanity Checks for Buffer Lengths

    If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segme…

    wibu-systems-ag codemeter-runtime

Revision history

  1. #1

    Initial version.

References