CVE-2026-6900

HighCVSS 7.4

Published: 06/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

An improper certificate validation vulnerability has been discovered in B&R Industrial Automation GmbH APROL. This issue affects APROL versions before R 4.4-01P5.

Risk Assessment

An attacker could exploit this vulnerability to perform a man-in-the-middle attack, potentially leading to interception or modification of transmitted data, and compromising the integrity and confidentiality of communication in the industrial environment.

Recommendation

Immediately update APROL to version R 4.4-01P5 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.