Will ABB PCM600 CVE-2026-15952/53 be actively exploited by end of October 2026?

CISA alerts disclosed two critical vulnerabilities in ABB Protection and Control IED Manager PCM600 versions ≤2.14 enabling privilege escalation and file overwrite. The vulnerabilities affect critical infrastructure control systems.

Resolution Criteria

Confirmed exploitation evidenced by: CISA KEV addition, vendor security advisory documenting active in-the-wild attacks, independent security researcher PoC with verified impact, or customer breach disclosures citing these CVE identifiers.