CVE-2026-15953

Medium5.0Published on September 28, 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.

CVSS score5.0 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weakness type (CWE)CWE-22

Vulnerabilities

Two ABB PCM600 Weaknesses Put Windows Privileges and Project Files at Risk

CISA disclosed two ABB PCM600 flaws enabling Windows privilege escalation and path traversal in project imports. Learn affected versions and mitigations.

Oct 1, 202621:505 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Two ABB PCM600 Weaknesses Put Windows Privileges and Project Files at Risk