Critical AVEVA Software Vulnerabilities Enables Remote Code Execution Under System Privileges

Cybersecuritynews •Abinaya • January 20, 2026

Seven vulnerabilities were disclosed in Process Optimization (formerly ROMeo) 2024.1 and earlier on January 13, 2026, including a critical flaw enabling unauthenticated SYSTEM-level remote code execution. The most severe vulnerability enables unauthenticated attackers to achieve remote code execution under system privileges, posing an immediate risk to industrial process control environments worldwide. The primary threat stems […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical AVEVA Software Vulnerabilities Enable Remote Code Execution On January 13, 2026, AVEVA disclosed seven critical vulnerabilities in its Process Optimization software, affecting version 2024.1 and earlier. The most severe flaw allows unauthenticated attackers to execute remote code with SYSTEM privileges, posing risks to industrial control systems worldwide. 3 sources 64

Critical AVEVA Software Vulnerabilities Enables Remote Code Execution Under System Privileges

The full story

Extracted Entities

Companies (1)

Platforms (1)