CVE-2026-17525— My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
Quick assessment
Affected
ABB My Control System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ABB My Control System 中存在不完整的清理漏洞。 该问题影响 My Control System 的 26.4 和 26.5 版本。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| ABB | My Control System | 26.4 |
affected |
26.5 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17525
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
Source: CVE Program / CVE List V5
Vulnerability Description
Incomplete cleanup vulnerability in ABB My Control System.
This issue affects My Control System: 26.4 and 26.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
清理环节不完整
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ABB | My Control System | 26.4 | - |
|
II. Public POCs for CVE-2026-17525
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17525
请登录查看更多情报信息。
Other References for CVE-2026-17525 (1)
IV. Related Vulnerabilities
Same vendor: ABB
Same weakness: CWE-459
-
CVE-2026-110924
Openssh: openssh: gssapi delegated credentials can be stored -
CVE-2026-102030
Junos OS and Junos OS Evolved: An attacker causes routing-da -
CVE-2026-103937
Misskey: Denial of service resulting from insufficient clean -
CVE-2026-109276
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Tempora -
CVE-2026-108982
macOS VeraCrypt 1.26.29 FUSE-T构建版本残留访问漏洞
V. Comments for CVE-2026-17525
No comments yet