Improper Certificate Validation in B&R Industrial Automation APROL
CVE-2026-6900

9.1CRITICAL

Key Information:

Status
Vendor
CVE Published:
6 July 2026

What is CVE-2026-6900?

An improper certificate validation vulnerability has been identified in B&R Industrial Automation's APROL product, specifically affecting versions prior to R 4.4-01P5. This vulnerability could allow attackers to exploit flaws in the certificate validation process, potentially leading to unauthorized access or exposure to man-in-the-middle attacks. Users of the affected versions are advised to update their systems to mitigate this security risk.

Affected Version(s)

APROL 0

References

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.