CVE-2026-15953CWE-22path-traversal

CVE-2026-15953

Medium · published September 28, 2026

CVSS v3.1

5.0

EPSS

Percentile

1.5

In the wild

Unconfirmed

What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).

This issue affects Protection and control IED manager (PCM600): through 2.14.

The record

Technical detail

CVSS v3.1: 5.0 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0: 5.6 · CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
EPSS: 0.00115 · 1.5th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-09-28T18:17Z

References (1)

EPSS history

Timeline