CISA ICS Advisory: ABB Ability Zenon

CISA published an ICS advisory on August 06, 2026, warning that multiple vulnerabilities in ABB Ability Zenon could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data.

Multiple vulnerabilities in IIoT MongoDB component

The advisory details flaws in the IIoT services component of ABB Ability Zenon when MongoDB 4.2 is installed. Successful exploitation could enable security bypass, system crashes, unauthorized command execution, or data compromise. The advisory does not state whether any of the vulnerabilities have been exploited in the wild.

Affected products

The advisory states that all versions of ABB Ability Zenon running IIoT services with MongoDB 4.2 installed are affected. No additional version ranges or specific build numbers are provided.

What to do

• Determine whether any ABB Ability Zenon installations in your environment include the IIoT services component with MongoDB 4.2.
• Apply the updates or configuration changes published by ABB for the affected IIoT services component.
• Implement the vendor’s recommended mitigations for the MongoDB 4.2 deployment as listed in the advisory.
• Monitor ABB’s official security channel for further patches or guidance specific to this ICS advisory.
• Review network segmentation and access controls around Zenon IIoT services as an additional defensive measure.

Organisations operating industrial control systems should treat vendor-published ICS advisories as priority input for their patch management and risk assessment processes.