# Industrial automation cybersecurity vulnerabilities > Live situation record from CLSTR: https://clstr.news/situations/industrial-automation-cybersecurity-vulnerabilities > Updated: 2026-10-13T08:33:43.000Z. Sources: 2. Developments: 2. Industrial automation and technology companies have reported a series of high-severity cybersecurity vulnerabilities affecting critical hardware and software products. In late September, ABB identified three high-severity flaws in its automation products, including Automation Builder, AC500 V3, and PCM600 software. These vulnerabilities could enable attackers to execute arbitrary code, cause denial of service, or escalate privileges. One specific flaw, CVE-2025-41700, involves untrusted data deserialization that could allow unauthenticated code execution via manipulated project files. By mid-October, additional major vulnerabilities were disclosed by Siemens, Bosch Rexroth, and Schneider Electric. Siemens reported hundreds of flaws, including 40 critical and 330 high-severity vulnerabilities affecting SIMATIC and RUGGEDCOM products. Bosch Rexroth identified a high-severity buffer overflow in its PRI7000 products related to compressed XZ data processing. Meanwhile, Schneider Electric reported multiple high-severity vulnerabilities in several SAGE RTU models, identified through internal investigations and research from U.S. national laboratories. ## Timeline ### 2026-10-13: Siemens, Bosch, and Schneider Electric report major cybersecurity vulnerabilities Siemens, Bosch, and Schneider Electric have reported numerous critical and high-severity cybersecurity vulnerabilities affecting industrial control systems and various software products. 2 sources. https://clstr.news/cluster/siemens-bosch-and-schneider-electric-report-major-cybersecurity-vulnerabilities ### 2026-09-28: ABB reports high-severity vulnerabilities in automation products ABB has identified high-severity vulnerabilities in its automation products, including Automation Builder and AC500 V3, which could lead to arbitrary code execution or denial of service. 2 sources. https://clstr.news/cluster/abb-reports-high-severity-vulnerabilities-in-automation-products --- Cite as: Industrial automation cybersecurity vulnerabilities. CLSTR, https://clstr.news/situations/industrial-automation-cybersecurity-vulnerabilities