Home / Items
Industrial control advisoryKnown exploitedSeverity 7.8 highExploit likelihood 98%
ABB Ability Edgenius
ICSA-26-260-06 · CISA · June 25, 2026
Summary
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability.
CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system
From CISA, quoted as published. Check the source before acting.
What to do
The problem is corrected in the following product versions:
- Edgenius 3.2.4.1
ABB recommends that customers apply the update at earliest convenience.
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors
- Limit access to ssh or cockpit
- By default, no additional lower privilege users are present on Edgenius installations
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-31431 | 7.8 high | Exploited | 98.1% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| ABB | Ability Edgenius Gateway - bE100 |
| ABB | Ability Edgenius Gateway - E3100C |
| ABB | Ability Edgenius Server - vE1000 |
| ABB | Ability Edgenius |
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- June 25, 2026: Initial version.
- September 17, 2026: Initial CISA Republication of ABB PSIRT 7PAA024620 advisory
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com