ABB Ability Edgenius

p a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-195-02_drupal.json" strong View CSAF /strong /a /p h2 Summary /h2 p strong ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. Once root access is obtained, the attacker can effectively gain complete control of the system /strong /p p The following versions of ABB Ability Edgenius are affected: /p ul li Ability Edgenius gt;=3.2.0.0| lt;3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100, gt;=3.2.0.0| lt;3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100C, gt;=3.2.0.0| lt;3.2.4.1 installed on ABB Ability Edgenius Server - vE1000 (CVE-2026-31431, CVE-2026-31431, CVE-2026-31431) /li /ul div class="csaf-table" table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap thead tr th role="columnheader" data-tablesaw-priority="persist" CVSS /th th role="columnheader" Vendor /th th role="columnheader" Equipment /th th role="columnheader" Vulnerabilities /th /tr /thead tbody tr td v3 7.8 /td td ABB /td td ABB Ability Edgenius /td td Incorrect Resource Transfer Between Spheres /td /tr /tbody /table /div h3 Background /h3 ul li strong Critical Infrastructure Sectors: /strong Critical Manufacturing /li li strong Countries/Areas Deployed: /strong Worldwide /li li strong Company Headquarters Location: /strong Switzerland /li /ul hr h2 Vulnerabilities /h2 div class="csaf-accordion" p a class="csaf-accordion-toggle-all" href="#" Expand All + /a /p div class="csaf-accordion-item" h3 a class="csaf-accordion-toggle" href="#" CVE-2026-31431 /a /h3 div class="csaf-accordion-content" p CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems. The issue originates in the Linux kernel’s cryptographic subsystem and impacts kernels used by most major Linux distributions released since 2017. Successful exploitation requires local code execution, however, in shared, containerized, or multi‑tenant environments this may increase the security risk /p p a href="https://www.cve.org/CVERecord?id=CVE-2026-31431" View CVE Details /a /p hr h4 Affected Products /h4 h5 ABB Ability Edgenius /h5 div class="ics-vendor-version-status" div class="ics-vendor" strong Vendor: /strong br ABB /div div class="ics-version" strong Product Version: /strong br ABB Ability Edgenius gt;=3.2.0.0| lt;3.2.4.1 installed on ABB Ability Edgenius Gateway - bE100, ABB Ability Edgenius gt;=3.2.0.0| lt;3.2.4.1 installed on ABB Ability Edgenius Gateway - E3100C, ABB Ability Edgenius gt;=3.2.0.0| lt;3.2.4.1 inst