CVE-2026-6901

HighCVSS 7.7

Published: 06/07/2026(UTC)Updated: 06/07/2026(UTC)Translated: 07/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

An Untrusted Search Path vulnerability has been discovered in B&R Industrial Automation GmbH APROL software. This issue affects versions prior to R 4.4-01P5.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code by placing a crafted file in the search path, potentially leading to full system compromise.

Recommendation

Immediately update APROL to version R 4.4-01P5 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.