How many CVEs does ABB have?

ABB has 257 published CVE records since 2008, including 83 in the last two years.

How many ABB CVEs are in CISA KEV?

None of ABB's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ABB products have the most CVEs?

The ABB products with the most published CVEs are MATRIX Series, NEXUS Series, ASPECT-Enterprise, aspect-ent-96, aspect-ent-2_firmware.

What are the most common weakness types in ABB CVEs?

ABB's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-306 (Missing Authentication for Critical Function).

Are there public exploits for ABB vulnerabilities?

Yes — 26 of ABB's CVEs have a known public exploit.

How many critical ABB vulnerabilities are there?

ABB has 51 critical and 134 high-severity CVEs.

What is the average severity of ABB CVEs?

The average CVSS base score across ABB's scored CVEs is 7.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

257 CVEs

ABB Vulnerabilities

Name: ABB vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ABB.

257

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

26

Public exploits

PoC or exploit code

7.7

Avg CVSS

2008–2026

Overview

ABB has 257 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 26 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ABB products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on ABB's vulnerability posture, as a share of its 257 published CVEs.

Average CVSS: 7.7
Critical / high: 72%
Actively exploited (KEV): 0%
Public exploit available: 10%
Patch available: 70%

Severity and exploitation

How the CVSS severity of ABB's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical51

High134

Medium66

Low6

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ABB's CVEs are currently listed in CISA's KEV catalog.

Public exploits

26

26 of ABB's CVEs have a known public exploit available.

Most affected products

The ABB products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ABB CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ABB CVE records.

Disclosure activity by year

How many ABB CVEs were published each year.

2019

19

2020

49

2021

7

2022

19

2023

23

2024

38

2025

68

2026

15

Latest ABB CVEs

The most recently disclosed vulnerabilities affecting ABB.

Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
CWE-353
Medium · CVSS 5.9
EPSS 0.1%2026-07-17
Advant Master Online Builder DLL vulnerability
CWE-427
Medium · CVSS 4.1
EPSS 0.1%2026-06-23
Freelance Security Lock – Access to Windows OS
CWE-305
Medium · CVSS 5.6
EPSS 0.1%2026-06-11
Communication analysis between the Card Reader and TP2CardReaderService daemon
CWE-863
High · CVSS 7.2
EPSS 0.2%2026-06-03
Stored Cross-Site Scripting in ABB T-MAC Plus web application
CWE-79
High · CVSS 7.2
EPSS 0.2%2026-06-03
Broken Access Control in ABB T-MAC Plus web application
CWE-639
High · CVSS 7.3
EPSS 0.3%2026-06-03
File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site
CWE-552
High · CVSS 7.3
EPSS 0.3%2026-06-03
Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850
CWE-1284
High · CVSS 7.1
EPSS 0.2%2026-04-13
Configuration Data Spill
CWE-306
High · CVSS 7.2
EPSS 0.3%2026-03-13
Device Reboot Control
CWE-306
High · CVSS 7.1
EPSS 0.3%2026-03-13
Authentication Bypass due to Improper Session Validation
CWE-294
High · CVSS 7.2
EPSS 0.2%2026-03-13
ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
CWE-303
Critical · CVSS 9.2
EPSS 0.4%2026-01-16

Track new ABB CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor ABB CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

libtiff266 CVEs Artifex262 CVEs Vim262 CVEs Elastic261 CVEs ISC259 CVEs sgi259 CVEs Samba253 CVEs SonicWall248 CVEs

Browse all vendors

Frequently asked questions

Common questions about ABB vulnerabilities.

How many CVEs does ABB have?: ABB has 257 published CVE records since 2008, including 83 in the last two years.
How many ABB CVEs are in CISA KEV?: None of ABB's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ABB products have the most CVEs?: The ABB products with the most published CVEs are MATRIX Series, NEXUS Series, ASPECT-Enterprise, aspect-ent-96, aspect-ent-2_firmware.
What are the most common weakness types in ABB CVEs?: ABB's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-306 (Missing Authentication for Critical Function).
Are there public exploits for ABB vulnerabilities?: Yes — 26 of ABB's CVEs have a known public exploit.
How many critical ABB vulnerabilities are there?: ABB has 51 critical and 134 high-severity CVEs.
What is the average severity of ABB CVEs?: The average CVSS base score across ABB's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ABB vulnerabilities

Monitor new ABB vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing