CVE-2026-6900 - Improper Certificate Validation

CRITICAL

Improper Certificate Validation

Published Jul 6, 2026

9.1

CRITICAL

CVSS 4.0

EPSS 0.22%

Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL.

This issue affects APROL: before R 4.4-01P5.

Vendor B&R Industrial Automation GmbH Product Aprol Default
unaffected
Affected
- ≥ 0, < R 4.4-01P5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
B&R Industrial Automation GmbH	Aprol	unaffected	Affected ≥ 0, < R 4.4-01P5

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

Link	Providers	Tags
https://br-cws-assets.de-fra-1.linodeobjects.com/SA26P011-661853b7.pdf
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41868		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Jul 6, 2026

Updated Jul 6, 2026

Reserved Apr 23, 2026

CISA Vulnrichment

Updated Jul 6, 2026

NVD

Status Deferred

Modified Jul 6, 2026

Red Hat

No data

ENISA EUVD

Assigner ABB

Published Jul 6, 2026

Updated Jul 6, 2026

GitHub

No data