[Control systems] ABB security advisory (AV26-346)

Serial number: AV26-346
Date: April 13, 2026

On April 13, 2026, ABB published security advisories to address vulnerabilities in the following product:

• ABB CI868 AC800M product line (System 800xA) for IEC 61850 - multiple firmware versions
• ABB CI850 Symphony Plus SD Series product line for IEC 61850 - multiple firmware versions
• ABB PM 877 Symphony Plus MR (Melody Rack) product line for IEC 61850 – firmware version 3.10 to 3.52
• ABB S+ Operations using IEC 61850 - multiple versions
• ABB Ability Symphony Plus – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• Denial of Service Vulnerabilities in System 800xA, Symphony Plus IEC 61850 communication stack CVE ID: CVE-2025-3756
• PostgreSQL vulnerabilities in ABB Ability Symphony Plus Engineering CVE ID: CVE-2023-5869, CVE-2023-39417, CVE-2024-7348, CVE-2024-0985
• ABB Cyber security alerts and notifications