Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 417

Export CSV
CVE-2026-8313

Rockwell Automation Arena® - Memory Corruption Vulnerability

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Arena Arena Arena Simulation
CVE-2026-8314

Rockwell Automation Arena® - Memory Corruption Vulnerability

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Arena Arena Arena Simulation
CVE-2026-9292

Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are permanently stored on the server. This vulnerability can result in the execution of malicious JavaScript when other users access the affected page, potentially allowing for account takeover, credential theft, or redirection to a malicious website.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Datamosaix Private Cloud
CVE-2026-9636

Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability

A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an intermediate certificate that has been revoked via a Certificate Revocation List (CRL). This could allow a network-based attacker to establish a connection using a certificate that should be untrusted, potentially bypassing CIP Security protections.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
1756-en4tr Compact Guardlogix 5380 Compactlogix 5380 and 2 more
CVE-2019-25276

Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Activation Studio Studio 5000 Logix Designer
CVE-2026-9127

Studio 5000 Logix Designer® – Multiple Vulnerabilities

A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Studio 5000 Logix Designer
CVE-2025-9124

Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Compact Guardlogix 5370
CVE-2025-9068

Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Rockwellautomation
Products
Windows Factorytalk Linx
CVE-2026-12663

ControlFLASH ® – Improper Access Control

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Controlflash Controlflash
CVE-2025-12768

FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Factorytalk Historian Machine Edition Factorytalk Historian Machine Edition
CVE-2026-12661

FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Factorytalk Historian Machine Edition Factorytalk Historian Machine Edition
CVE-2024-7952

DataEdgePlatform DataMosaix™ Private Cloud

A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Dataedgeplatform Datamosaix Private Cloud Dataedgeplatform Datamosaix Private Cloud
CVE-2026-6071

Code Execution Vulnerability in Arena®

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a malicious page or open a malicious file.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Arena Arena
CVE-2026-19471

Rockwell Automation ArmorStart® LT Stored Cross-site scripting

Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Armorstart Lt Armorstart Lt
CVE-2026-19472

Rockwell Automation ArmorStart® LT Denial Of Service

A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Armorstart Lt Armorstart Lt
CVE-2026-16675

Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Factorytalk Activation Manager Factorytalk Activation Manager
CVE-2026-9621

RSLinx Classic® - Multiple Vulnerabilities

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Rockwell Automation Rockwellautomation
Products
Rslinx Classic Rslinx Classic