Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CISA warns of 2 flaws in ABB PCM600 ≤2.14 (CVE-2026-15952, CVE-2026-15953) risking Windows privileges and project files. Review ICSA-26-274-03 and patch fast. #ICSsecurity #ABB #Vulnerability https://cyberworldops.eu/en/two-abb-pcm600-weaknesses-put-windows-privileges-and-project-files-at
🔴 ABB power-grid software vulnerable to privilege escalation, path traversal ABB Protection and Control IED Manager PCM600 versions 2.14 and earlier contain two vulnerabilities affecting energy infrastructure worldwide. CVE-2026-15952 allows local attackers with valid credentials to escalate privileges via the Scheduler Service running under LocalSystem account. CVE-2026-15953 permits path traversal in project archive extraction, potentially writing files outside intended directories. No public exploitation reported.