CVE-2026-15952: Improper Permission Assignment in Scheduler Service
Published Sep 28, 2026
·Updated
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM600): through 2.14.
Affected Software
1 affected component
ABB Protection and control IED manager (PCM600)<=2.14
Event History
Sep 28, 2026
CVE Published
via MITRE·01:10 PM
Data Sourced
via MITRE·01:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local access and high privileges on the affected system. User interaction is not required, and the attack complexity is rated high.
2
Which deployments are affected?
ABB Protection and control IED manager (PCM600) versions through 2.14 are affected.
3
What could a successful exploit impact?
The vulnerability is rated as having high impact on confidentiality, integrity, and availability.