CVE-2025-11044: B&r Industrial Automation GmbH Automation Runtime

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

Affected products

• B&r Industrial Automation GmbH Automation Runtime: from 4, before R4.93 (fixed in R4.93); from 6, before 6.5 (fixed in 6.5)

Published 2026-01-19. Last modified 2026-06-17.