Multiple Vulnerabilities in Industrial Control Systems - 15th July 2026

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-31431, CVE-2025-13162, CVE-2025-14771, CVE-2025-14772, CVE-2025-14773, CVE-2025-14774

July 15, 2026

Executive Summary

Multiple CVEs spanning uncontrolled DLL search path (CVSS 4.4), Linux kernel privilege escalation (CVSS 7.8), and critical T-MAC Plus flaws including file disclosure (CVSS 9.9).

Key Details

Affected Platform

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

ABB Advant Master Online Builder, ABB Ability Edgenius, ABB T-MAC Plus, and Rockwell Automation 1715-AENTR EtherNet/IP Adapter in ICS and OT environments.

Operational Impact

ICS compromise can disrupt operational technology, trigger equipment failures, or enable unauthorised control of industrial processes.

Technical Root Cause

Issues include DLL hijacking via uncontrolled search paths, Linux kernel privilege boundary flaw (CVE-2026-31431), broken access controls, stored XSS, and insecure network protocols.

Recommended Mitigation

Patch ABB products per advisory guidance.
Disable removable media and restrict SSH or Cockpit access on Edgenius.
Apply T-MAC Plus update to version 4.0-25.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore MDR for OT

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

CISA ICS Advisories, ABB Security Advisories for Advant Master, Edgenius and T-MAC Plus, CVE-2025-13162, CVE-2026-31431, CVE-2025-14771, CVE-2025-14772, CVE-2025-14773, CVE-2025-14774