You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
abb pvi
About this tag
The abb pvi tag covers discussions about ABB B&R PVI client software, particularly a medium-severity information-disclosure vulnerability (CVE-2026-0936) that can expose credentials through client-side log files when logging is enabled. The flaw, addressed in PVI version 6.5.0, highlights the security risk of logs in industrial environments. Content focuses on the advisory from CISA and ABB, the nature of the vulnerability, and the broader lesson about operational security in industrial control systems.
On May 5, 2026, CISA republished ABB’s advisory for CVE-2026-0936, a medium-severity information-disclosure flaw in ABB B&R PVI client software that can expose credentials through client-side log files when logging has been explicitly enabled. The bug is not a remote-code-execution fire alarm...