Will ABB PCM600 CVE-2026-15952/53 be actively exploited by end of October 2026?
[Auto-closed — deadline passed with no qualifying event] The market deadline was October 31, 2026, and today is November 4, 2026 — the deadline has passed. No credible evidence of active exploitation of CVE-2026-15952/53 has been found in the recent intel batch or public sources. The CISA KEV addition reported in today's alert (November 3, 2026) references CVE-2026-119977 (WordPress), not the ABB PCM600 vulnerabilities in question. The absence of any CISA KEV addition, vendor advisory documenting active attacks, or customer breach disclosures citing these CVEs by the stated deadline constitutes resolution.
Evidence: https://threatodds.com/markets/a0eb160c-8d13-42ca-9464-9fd9d39ce6fbMarket Overview
AI GENERATEDCISA alerts disclosed two critical vulnerabilities in ABB Protection and Control IED Manager PCM600 versions ≤2.14 enabling privilege escalation and file overwrite. The vulnerabilities affect critical infrastructure control systems.
Primary SourceResolution Criteria
Confirmed exploitation evidenced by: CISA KEV addition, vendor security advisory documenting active in-the-wild attacks, independent security researcher PoC with verified impact, or customer breach disclosures citing these CVE identifiers.