Vendors and CVEs › CVEs › CVE-2026-98432
CVE-2026-98432: what it is, who is affected and what to do
ABB reports a publicly known use-after-free flaw in the kernel IPv4 handling of ABB Ability OPTIMAX (CVE-2026-98432, CVSS 9.8). An attacker who exploits it could make the product insert and run arbitrary code. An update is available.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 9.8, as the source states.
- EPSS. <1% chance of exploitation in the next 30 days, when reported.
- Records. CVE-2026-98432 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical
ABB OPTIMAX flaw could let attackers run their own code
ABB reports a publicly known use-after-free flaw in the kernel IPv4 handling of ABB Ability OPTIMAX (CVE-2026-98432, CVSS 9.8). An attacker who exploits it could make the product insert and run arbitrary code.