PT-2026-84216

Name of the Vulnerable Software and Affected Versions FactoryTalk Activation Manager affected versions not specified Description A privilege escalation issue exists due to custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repa...

PT-2026-84210

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2026-16675: Improper Restriction of Excessive Authentication Attempts

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...

Exploit for Insufficiently Protected Credentials in Rockwellautomation Factorytalk_Services_Platform

cip-security-poc — proving the fix principle behind CVE-2021...

Rockwell Automation FactoryTalk ViewPoint - Panel Detection

Rockwell Automation FactoryTalk ViewPoint is a web-based HMI that allows remote monitoring and control of industrial automation systems from a browser. It provides access to FactoryTalk View Machine Edition and Site Edition displays. Exposed instances may allow unauthorised access to industrial...

Rockwell Automation FactoryTalk Services Platform

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to impersonate an authorized user on the FTSP server, resulting in unauthorized access to system configurations. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

FactoryTalk Directory Database Directory Access Privilege Escalation

The vulnerability of the FactoryTalk Directory database in the FactoryTalk Services Platform is related to deficiencies in the authentication process when processing JWT algorithms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to...

FactoryTalk DataMosaix Private Cloud Code Execution

The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

Rockwell Automation FactoryTalk DataMosaix

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious scripts on the server. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

EUVD-2026-43702

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are...

CVE-2026-9292

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are...

CVE-2026-10714

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2026-9292 Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are...

CVE-2026-9292 Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are...

CVE-2026-10714 Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2026-10714

The CVE-2026-10714 issue affects FactoryTalk Services Platform (FTSP) . It hinges on a JWT validation bypass where the application does not verify that the JWT algorithm is configured for RSA, allowing an attacker to set the algorithm to "none" and forge tokens. This could enable an authenticated...

EUVD-2026-43700

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2026-10714 Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2026-9292: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are...

CVE-2026-10714: Weak Authentication

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...