Home / Items
Vendor advisorySeverity 7.8 high
ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
7PAA026271 · ABB · October 22, 2026
Summary
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited.
This issue may allow unauthorized manipulation of the edge authentication database if successfully exploited.
ABB has developed and released a corrective update that resolves this vulnerability and enhances the security posture of the affected system.
From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove exposure with well-known impact on functionality.
For brownfield customers, ABB provides a Kubernetes network policy that restricts access to Edge Authentication Database (AuthDB) to the authorized services required for normal operation of an already deployed and configured system.
For implementation details, refer to Technical Description-ABB Ability Edgenius Missing Authentication in Edgenius AuthDB.docx (7PAA025722) listed in the reference…
The following conditions reduce the likelihood of successful exploitation. For additional guidance, see General security recommendations
- Ensure systems are accessible only from trusted networks
- Restrict access to edge nodes using firewall rules and network segmentation
- Maintain up-to-date patches for OS, firmware, and dependent components
- Interact only with trusted applications, software packages, and email attachments
- Protect systems from unauthorized physical access
ABB fixed this vulnerability in ABB Ability Edgenius version 3.2.4.1 and later. Customers should upgrade to version 3.2.4.1 or later as soon as possible
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-13599 | 7.8 high | No | 0.1% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| ABB | Ability Edgenius |
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- October 22, 2026: Initial version.
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com