Skip to content
OpenAdvisories
High ICSA-26-120-04 1 CVE

ABB Ability OPTIMAX

Published Jan 16, 2026 · Updated Apr 30, 2026 · Revision 2

Vendor: ABB Product: 6.1 Product: 6.2 Product: 6.3 Product: 6.4

Summary

ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited.

An attacker who successfully exploits this vulnerability could bypass user authentication and potentially cause the product to:
- Shutdown the system,
- Modify the configuration of the system,
- Install and run arbitrary code

Vulnerabilities 1

  • High 8.1
    CVE-2025-14510

    ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

    Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120.

    ABB ABB Ability OPTIMAX ICS / OT

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT 9AKK108472A1331 advisory

  2. #1

    Initial version.

References