CVE-2025-14772CWE-639

Broken Access Control in ABB T-MAC Plus web application

High · published June 3, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
20.7
In the wild
Unconfirmed
What it is

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS
0.00292 · 20.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-06-03T09:25Z
EPSS history
Timeline
  • 03 JUN 09:25Z
    Broken Access Control in ABB T-MAC Plus web application
    cvelistv5