Advisories · Technology

B&R Industrial Automation GmbH Automation Runtime.

Every CVE that names B&R Industrial Automation GmbH Automation Runtime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-11044 CVE record

CVSS 8.9 High

Vulnerability on Automation Runtime my cause DoS Conditions
- B&R Industrial Automation GmbH Automation Runtime
- Denial of service
Not analysed yet 19 Jan 2026
CVE-2025-11498 CVE record

CVSS 5.3 Medium

CSV Formula Injection Vulnerability
- B&R Industrial Automation GmbH Automation Runtime
- Other injection
Not analysed yet 14 Oct 2025
CVE-2025-3449 CVE record

CVSS 2.3 Low

Weak Session Token used in Automation Runtime SDM
- B&R Industrial Automation GmbH Automation Runtime
- CWE-340
Not analysed yet 7 Oct 2025
CVE-2025-3448 CVE record

CVSS 5.1 Medium

XSS on SDM
- B&R Industrial Automation GmbH Automation Runtime
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2025