Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Vendor advisorySeverity 5.2 medium

My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion

7PAA025438 · ABB · October 15, 2026

Summary

An update is available that resolves a privately reported vulnerability to the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the node running the product to stop or to become inaccessible.

From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.

What to do

Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advice on how to keep your system secure. For the reported issue there are no known mitigating factors. Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove the exposure with well-known impact on functionality. ABB has tested the following workarounds. Although these workarounds will not correct the underlying vulnerability, they can help block known attack vectors. When a workaround reduces functionality, this is identified below as “Impact of workaround”. As a workaround for the reported issue the temporary files could be deleted manually: - Windows environments For Windows environments… The problem is corrected in the following product versions: - My Control System 26.6 (all deployment types) ABB recommends that customers apply the update at earliest convenience. NOTE - Installations of MCS on Edgenius with version 26.5 or earlier are not eligible for an update to MCS 26.6, as this requires an OS upgrade to EdgeniusOS 3.3.0 or later. Support for the required OS upgrade is expected with the upcoming EdgeniusOS 4.0.0 and the corresponding MCS package. Until an upgrade path is available, please follow the workaround in this document. A follow up communication will be…

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2026-175255.2 mediumNo0.1%Incomplete Cleanup (CWE-459)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
ABBMy Control System26.4, 26.526.6

Why it's on these mode pages

  • Pipeline: Vendor table: ABB (matched by rule)

Change history

  1. October 15, 2026: Initial version
  2. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com