CVE-2026-13599
highpriority · track · 0OT risk · elevatedCHMissing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedAbility Edgeniusabb_psirt
ABB fixed this vulnerability in ABB Ability Edgenius version 3.2.4.1 and later. Customers should upgrade to version 3.2.4.1 or later as soon as possible
- MitigationAbility Edgeniusabb_psirt
The following conditions reduce the likelihood of successful exploitation. For additional guidance, see General security recommendations - Ensure systems are accessible only from trusted networks - Restrict access to edge nodes using firewall rules and network segmentation - Maintain up-to-date patches for OS, firmware, and dependent components - Interact only with trusted applications, software packages, and email attachments - Protect systems from unauthorized physical access
- WorkaroundAbility Edgeniusabb_psirt
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove exposure with well-known impact on functionality. For brownfield customers, ABB provides a Kubernetes network policy that restricts access to Edge Authentication Database (AuthDB) to the authorized services required for normal operation of an already deployed and configured system. For implementation details, refer to Technical Description-ABB Ability Edgenius Missing Authentication in Edgenius AuthDB.docx (7PAA025722) listed in the reference section, distributed separately.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.8–7.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- 7PAA026271ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB 2026-10-22csaf · abb_psirtCH
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited. This issue may allow unauthorized manipulation of the edge authentication database if successfully exploited. ABB has developed and released a corrective update that resolves this vulnerability and enhances the security posture of the affected system.
sources
Which sources assert this record, and when.
references (1) nvd
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan