CVE-2026-17525
Deferred Deferred - Pending Action

Incomplete Cleanup Vulnerability in ABB My Control System

Vulnerability report for CVE-2026-17525, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: Asea Brown Boveri Ltd. (ABB)

Description

Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ABB My Control System 26.4
ABB My Control System 26.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-459 The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an incomplete cleanup vulnerability in ABB My Control System versions 26.4 and 26.5. It allows disk space exhaustion due to temporary files not being properly deleted after use, which could lead to system performance issues or crashes.

Detection Guidance

To detect this vulnerability, monitor disk space usage and temporary file cleanup processes in ABB My Control System versions 26.4 and 26.5. Check for excessive temporary files that are not removed after operations, which may indicate incomplete cleanup. Review system logs for disk space exhaustion events.

Impact Analysis

The vulnerability may cause system instability or downtime by consuming disk space unnecessarily. It could affect operations relying on My Control System, potentially leading to degraded performance or service interruptions.

Compliance Impact

The vulnerability causes disk space exhaustion due to incorrect temporary file cleanup, which could lead to system instability or denial of service. This may impact compliance by disrupting data availability and integrity, potentially violating requirements for secure data handling in standards like GDPR and HIPAA.

Mitigation Strategies

Monitor disk space usage on systems running ABB My Control System versions 26.4 and 26.5. Check for unexpected temporary file accumulation and ensure proper cleanup processes are in place.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17525. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart