B&R Automation X20EDS410 Out-of-bounds Write (CVE-2026-46300)

The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's skbtrycoalesce that loses the shared-frag marker during coalescing. Successful local exploitation of this vulnerability could allow an authenticated attacker with low...

EUVD-2026-41868

Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5...

Impact of Linux Kernel vulnerabilities on B&R products

SUMMARY B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the affected system. Public...

CVE-2025-3448

Reflected cross-site scripting XSS vulnerabilities exist in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session...

EUVD-2025-32883

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.4...

PT-2025-41144

Name of the Vulnerable Software and Affected Versions B Industrial Automation Automation Runtime versions prior to 6.4 Description An issue exists in B Industrial Automation Automation Runtime that allows for improper neutralization of input during web page generation, potentially leading to...

CVE-2024-8313

The CVE-2024-8313 entry concerns B&R APROL SNMP (

B&R Industrial Automation B&R APROL 代码问题漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation of Austria. A code issue vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from a server-side request forgery in the APROL Web Portal that could allow a...

B&R Industrial Automation B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from insufficient script processing privileges and could allow an authenticated...

B&R Industrial Automation B&R APROL 跨站脚本漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A cross-site scripting vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from improper input neutralization in the APROL Web Portal, and could...

B&R Industrial Automation Studio 安全漏洞

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions prior to 4.12 that stems fr...

B&R Industrial Automation Studio Security Breach

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions prior to 4.6, BR Technology...

PT-2024-14857 · B&R · B&R Automation Runtime

Name of the Vulnerable Software and Affected Versions: B&R Automation Runtime versions = G4.93 Description: A reflected cross-site scripting XSS vulnerability exists in the SVG version of System Diagnostics Manager that enables a remote attacker to execute arbitrary JavaScript code in the context...

CVE-2022-43765

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

B&R Automation Runtime 安全漏洞

B&R Automation Runtime is a major component of AS from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Runtime versions prior to 4.91 that stems from improper buffer limits in the web server. Exploitation of the vulnerability by an unauthenticated attacker...

B&r Automation APROL Command Injection Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A command injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to execute with root privileges by...

B&R Industrial Automation APROL Path Traversal Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. A path traversal vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to attack...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...