Multiple Vulnerabilities in Industrial Control Systems - 15th July 2026

Affected Environment
ABB Advant Master Online Builder, ABB Ability Edgenius, ABB T-MAC Plus, and Rockwell Automation 1715-AENTR EtherNet/IP Adapter in ICS and OT environments.

Threat Overview
Multiple CVEs spanning uncontrolled DLL search path (CVSS 4.4), Linux kernel privilege escalation (CVSS 7.8), and critical T-MAC Plus flaws including file disclosure (CVSS 9.9).

Exposure Timeline
Advisories issued 15th July 2026. Patches available from ABB and Rockwell Automation for most affected versions.

Attack Surface
OT and ICS networks with internet-connected or locally accessible ABB and Rockwell components, particularly those permitting removable media or local user access.

Technical Root Cause
Issues include DLL hijacking via uncontrolled search paths, Linux kernel privilege boundary flaw (CVE-2026-31431), broken access controls, stored XSS, and insecure network protocols.

Exploitation Pathway
Local attacker plants malicious DLL or executable; kernel flaw allows container escape to root. T-MAC Plus web flaws allow file exfiltration, admin operations by unprivileged users, and DoS by unauthenticated attackers.