[Control systems] B&R security advisory (AV26-056)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-056<br /><strong>Date: </strong>January 26, 2026</p>

On January 19, 2026, B&R published ICS advisories to address vulnerabilities in the following products:

• Automation Runtime 6 versions – versions prior to 6.5
• Automation Runtime 4 versions – versions prior to R4.93
• Automation Studio – versions prior to 6.5

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• SA25P005: Improper Handling of Flooding conditions on ANSL Server
• SA25P004: Automation Studio Insufficient Server Certificate Validation
• B&R Cyber Security Advisories and Notices

</div>

Article Link: https://cyber.gc.ca/en/alerts-advisories/control-systems-br-security-advisory-av26-056