Is CVE-2026-31431 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-31431

ABB recommends applying the fix in Edgenius version 3.2.4.1 at the earliest convenience. Additional mitigations include limiting access to SSH or cockpit interfaces and noting that by default, no additional lower-privilege users are present on Edgenius installations. Refer to ABB PSIRT security advisory 7PAA024620 for further guidance.

Quick answers

What is CVE-2026-31431?: ABB recommends applying the fix in Edgenius version 3.2.4.1 at the earliest convenience. Additional mitigations include limiting access to SSH or cockpit interfaces and noting that by default, no additional lower-privilege users are present on Edgenius installations. Refer to ABB PSIRT security advisory 7PAA024620 for further guidance.
How severe is CVE-2026-31431?: high, CVSS 7.8
Is CVE-2026-31431 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-31431 be mitigated?: ABB recommends applying the fix in Edgenius version 3.2.4.1 at the earliest convenience. Additional mitigations include limiting access to SSH or cockpit interfaces and noting that by default, no additional lower-privilege users are present on Edgenius installations. Refer to ABB PSIRT security advisory 7PAA024620 for further guidance.

CVSS

7.8

Vendor

ABB

Published

Sep 30, 2026 · 08:42

Patch

Unknown / not confirmed

Affected products

ABB Ability Edgenius, ABB Ability Edgenius Gateway - bE100

Mitigation

Siemens SIPLUS and SIMATIC Products Affected by "Copy Fail" Vulnerability Tracked as CVE-2026-31431

CISA and Siemens have disclosed that multiple SIMATIC and SIPLUS industrial automation products are vulnerable to a "Copy Fail" flaw tracked as CVE-2026-31431. The vulnerability affects a wide range of HMI and runtime platforms including SIMATIC AX Runtime Core Linux, SIMATIC CN 4100, and various MTP1000, MTP1200, MTP1500, and MTP1900 series devices running affected firmware versions prior to 21.0.2.1. Siemens has released updated versions and recommends immediate updating. No public exploitation has been confirmed, but the advisory notes that unauthenticated attackers may exploit the vulnerability to read sensitive information or cause denial of service. Users are advised to update affected products to the latest available versions or apply recommended countermeasures.

11m

CVE-2026-31431

Quick answers

Related News

Siemens SIPLUS and SIMATIC Products Affected by "Copy Fail" Vulnerability Tracked as CVE-2026-31431

ABB Ability Edgenius Vulnerability CVE-2026-31431: Linux Kernel Flaw Allows Privilege Escalation