VulnSocial

CVE-2025-14772General(abb / t-mac_plus)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

abb CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • t-mac_plus

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-03); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
abb
Products
t-mac_plus

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-03: 1Mentions · 2026-06-04: 1Technical Details · 2026-06-03: 1Technical Details · 2026-06-04: 106-0306-04
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-06-031
General1
2026-06-041
Disclosure1
Full discourse2 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    24 HIGH-severity CVEs dropped today. Key ones to watch: 🔥 AI/ML: CVE-2026-5241: huggingface/transformers ... RCE via trust_remote_code bypass when loading LightGlue models (even with trust_remote_code=False) 💥 Buffer Overflow → Root: CVE-2026-35085/84/83: gdv-serverconfig, dali-devconfig ... stack overflow → full root CVE-2022-49042/036: Synology ... local RCE via MinGW DLL & OpenSSL config 📁 Arbitrary File Ops (user → root): CVE-2026-35082/80/79/78/77/76: ugw-* & bac-scanresult ... read/terminate/delete arbitrary files & processes 🌐 Web/App: CVE-2025-15655: Mojoomla ... SQL injection CVE-2025-15654: Fox-themes Prague ... Reflected XSS CVE-2025-14772/73: ABB T-MAC Plus ... auth bypass + XSS 🔧 PrivEsc: CVE-2025-41259: SWUpdate ... TOCTOU → root CVE-2025-15656: Mojoomla ... privilege escalation 📡 Network: CVE-2026-37460: FRRouting ... crafted BGP UPDATE → DoS Patch priority: AI infra, Synology backups, ugw devices, SWUpdate, Mojoomla, ABB T-MAC.

    Post summary

    A list of twenty‑four high‑severity CVEs is announced, outlining various remote code execution, privilege escalation, and denial‑of‑service vulnerabilities across multiple platforms, with no proof‑of‑concept or active exploitation evidence reported.

    11000129
    1.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2025-14772 Authorization Bypass Through User-Controlled Key in ABB T-MAC Plus 4.0-24 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14772

    Post summary

    The text merely announces the CVE and its category without providing evidence of PoC, exploitation, or mitigation, thus falling into a general disclosure category.

    0000040
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appabbt-mac_plus4.0-24--

Explore more

Back to dashboardabb CVEst-mac_plus vulnerabilities