Home / Items
Vendor advisorySeverity 7.8 high
ABB Automation Builder - Deserialization of untrusted data
3ADR011566 · ABB · September 28, 2026
Summary
ABB is aware of vulnerabilities in the products versions listed as affected in the advisory.
Automation Builder could execute arbitrary code by crafting the project file or project archive file.
From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
The problem is corrected in the following product version:
- Automation Builder 2.9.1
ABB recommends that customers apply the update at earliest convenience. Automation Builder 2.9.1 is available for download from the related download site.
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove the exposure with well-known impact on functionality. ABB has tested the following workarounds. Although these workarounds will not correct the underlying vulnerability, they can help block known attack vectors. When a workaround reduces functionality, this is identified below as “Impact of work-around”.
The vulnerability can be closed by enabling local access only. See chapter “Recommended immediate actions” for details.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2025-41700 | 7.8 high | No | 0.2% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| ABB | Automation Builder |
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- September 28, 2026: Initial version.
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com