CVE-2026-17525: My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
Published Oct 15, 2026
·Updated
Incomplete cleanup vulnerability in ABB My Control System.
This issue affects My Control System: 26.4 and 26.5.
Affected Software
1 affected component
ABB My Control System=26.4, =26.5
Event History
Oct 15, 2026
CVE Published
via MITRE·10:09 AM
Data Sourced
via MITRE·10:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments should be assessed for exposure?
ABB My Control System versions 26.4 and 26.5 are identified as affected.
2
What access and conditions are required for exploitation?
The CVSS vector indicates an attacker needs adjacent-network access, low-level privileges, and user interaction. The attack complexity is rated low.
3
What is the expected security impact?
The reported impact is high availability impact, consistent with disk space exhaustion. No confidentiality or integrity impact is indicated in the CVSS vector.