CVE-2026-13599: ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB

Q: What access does an attacker need to exploit this issue?

The attack vector is local, so remote network access alone is not indicated as sufficient. Exploitation requires low-level privileges and high attack complexity, but no user interaction.

Q: Which deployments should be considered affected?

ABB Ability Edgenius versions through 3.2.3.0 are affected.

Q: What could a successful exploit allow?

The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. Its scope is changed, indicating the impact may extend beyond the initially vulnerable security authority.

Published Oct 22, 2026

Updated

Missing authentication for critical function vulnerability in ABB Ability Edgenius.

This issue affects Ability Edgenius: through 3.2.3.0.

Affected Software

1 affected component

ABB Ability Edgenius<=3.2.3.0

Event History

Oct 22, 2026

CVE Published

via MITRE·05:36 PM

Data Sourced

via MITRE·05:36 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is local, so remote network access alone is not indicated as sufficient. Exploitation requires low-level privileges and high attack complexity, but no user interaction.

Which deployments should be considered affected?

ABB Ability Edgenius versions through 3.2.3.0 are affected.

What could a successful exploit allow?