Vendors and CVEs › CVEs › CVE-2026-40706
CVE-2026-40706: what it is, who is affected and what to do
ABB reports public vulnerabilities in third-party components (PHP and NTFS-3G) in the IPEC iSM Local Server. An attacker could insert and run arbitrary code. ABB has had no reports of active exploitation. Highest CVSS score stated: 9.8.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-40706 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical Known exploited
ABB IPEC iSM Local Server has flaws in PHP and NTFS-3G
ABB reports public vulnerabilities in third-party components (PHP and NTFS-3G) in the IPEC iSM Local Server. An attacker could insert and run arbitrary code. ABB has had no reports of active exploitation.