FRONT PAGE / CYBER / CYB-2026-06-23-F2
CYBER · ransomware threat groups · 2026-06-23SCOOP 67
Linux Kernel Vulnerabilities Expose B&R APROL Products to Local Privilege Escalation (CVSS 7.8)
Per CISA's June 23 ICS advisory, publicly reported Linux kernel vulnerabilities affect kernel versions shipped with B&R products, including Linux for B&R APROL X20EDS410, rated CVSS v3 7.8.
At a glance
- Linux kernel vulnerabilities shipped in B&R products (including APROL X20EDS410) are rated CVSS v3 7.8.
- Local exploitation could allow privilege escalation, and public PoC exploits exist.
- B&R reported no evidence of active exploitation against its products at publication.
VERDICT — CONFIRMED
Per CISA's June 23 ICS advisory, publicly reported Linux kernel vulnerabilities affect kernel versions shipped with B&R products, including Linux for B&R APROL X20EDS410, rated CVSS v3 7.8. Successful local exploitation could allow privilege escalation on affected systems, and public proof-of-concept exploits are available for the flaws. B&R stated it had no evidence of active exploitation targeting its products at the time of publication.
Key facts on file
- Linux kernel vulnerabilities shipped in B&R products (including APROL X20EDS410) are rated CVSS v3 7.8.
- Local exploitation could allow privilege escalation, and public PoC exploits exist.
- B&R reported no evidence of active exploitation against its products at publication.
OFFICIAL RECORD
CISA — Cybersecurity AdvisoriesSources · two-source rule
PRIMARY · DOCCISA — Cybersecurity Advisories
CITE THIS FILE — The Dossier Wire · cyb-2026-06-23-f2 · filed 2026-06-23 · https://thedwire.com/wire/cyb-2026-06-23-f2-linux-kernel-vulnerabilities-expose-b-r-aprol-products-to.html · Primary and corroborating sources listed above; archived at publication. Republishing & licensing: hello@thedwire.com.
