Home / Items
Vendor advisoryKnown exploitedSeverity 9.8 criticalExploit likelihood 100%
APROL Impact of PHP2Shell
SA26P015 · ABB · October 23, 2026
Summary
B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory.
An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected devices.
From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
The problem is corrected in the following product versions:
- version line R4.4-01: APROL-AutoYaST-DVD-V4.4-010.12.261023-SLE15-SP6
- version line R4.4-65: APROL-AutoYaST-DVD-V4.4-650.4.261022-SLE15-SP7
B&R recommends that customers apply the update at earliest convenience.
The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
APROL is intended to be operated only in environments with restricted logical and physical access, as described in the product documentation and in "Defense in Depth for B&R products". Until patches are available and installed, B&R recommends that customers implement additional security measures to limit access to the product to trusted personnel. We advise customers to review and validate their current access restrictions to confirm that logical and physical access controls are configured in line with these recommendations. These measures reduce, but may not fully eliminate, the risk of…
The problem is corrected in the following product versions:
- version line R4.4-01: APROL-AutoYaST-DVD-V4.4-010.12.261023-SLE15-SP6
- version line R4.4-65: APROL-AutoYaST-DVD-V4.4-650.4.261022-SLE15-SP7
B&R recommends that customers apply the update at earliest convenience.
The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-109618 | 9.8 critical | Exploited | 100.0% |
| CVE-2026-109619 | 9.8 critical | Exploited | 100.0% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| B&R Industrial Automation GmbH | APROL |
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- October 23, 2026: Initial version.
- November 3, 2026: Affected products, recommended actions
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com