Home / Items
Vendor advisorySeverity 7.5 high
Mint Workbench I Path traversal Vulnerability
9AKK108473A3188 · ABB · September 22, 2026
Summary
A local attacker who successfully exploited this vulnerability could gain elevated privileges by Path Traversal, arbitrarily reading files of system, to cause confidentiality impact of system files.
From ABB (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
Mint Workbench I 5876 and the versions before, are impacted, customers who use these products, should:
- Disable Service MWI http when it is not in active use.
- Restrict physical machine access to authorized personnel only.
- Avoid storing sensitive or confidential data on any hosts running service MWI http.
- Enable User Account Control (UAC) to block unauthorized privilege escalation attempts.
These actions above are the only measures available. No further patch will be released because this product reaches end-of-life globally (out of China) by the end of 2026 and in China by the…
Mint Workbench I 5876 and the versions before, are impacted, customers who use these products, should:
- Disable Service MWI http when it is not in active use.
- Restrict physical machine access to authorized personnel only.
- Avoid storing sensitive or confidential data on any hosts running service MWI http.
- Enable User Account Control (UAC) to block unauthorized privilege escalation attempts.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-19438 | 7.5 high | No | 0.4% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| ABB | Mint Workbench I |
Why it's on these mode pages
- Pipeline: Vendor table: ABB (matched by rule)
Change history
- September 22, 2026: Initial version
- September 29, 2026: MWI introduction
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com