EUVD-2026-97608

Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition that lets any authenticated user change the installed edition. Low-privileged front-end users can call the action route when the licensed edition mismatches to...

CVE-2026-109306 Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-edition

Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition that lets any authenticated user change the installed edition. Low-privileged front-end users can call the action route when the licensed edition mismatches to...

CVE-2026-109306

Craft CMS versions 5.0.0 before 5.10.14 are vulnerable to a missing authorization flaw in the AppController::actionSwitchToLicensedEdition() function. This flaw allows any authenticated user to modify the installed edition of the software. Specifically, low-privileged front-end users can trigger ...

Rockwell Automation FactoryTalk Historian Site Edition

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

CVE-2025-13036 Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token...

CVE-2025-13036 Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token...

EUVD-2025-210168

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token...

CVE-2025-13036: Concurrent Execution using Shared Resource with Improper Synchronization

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token...

PT-2026-49705

Name of the Vulnerable Software and Affected Versions FactoryTalk Historian Site Edition affected versions not specified Description An authentication bypass issue exists where an attacker can obtain a valid authentication token by continually sending requests to the login endpoint. Recommendatio...

CVE-2025-24482 FactoryTalk® View Site Edition - Local Code Injection

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...

PT-2025-5370 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Product and version mentioned affected versions not specified Description: The issue is related to an incorrect permission assignment in the product, which is due to the incorrect assignment of permissions to the remote debugger port. This ca...

PT-2025-5371 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Product and version affected versions not specified Description: A Local Code Injection issue exists due to incorrect default permissions, allowing for the execution of DLLs with higher-level permissions. Recommendations: At the moment, there...

Rockwell Automation FactoryTalk View Site Edition Code Execution

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition stems from the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...

CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains...

PT-2024-6054

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View Site Edition affected versions not specified Description A remote code vulnerability exists in the affected products. This issue can be exploited for full unauthenticated remote code execution when combined...

Rockwell Automation FactoryTalk View Site Edition 安全漏洞

Rockwell Automation FactoryTalk View Site Edition is an integrated software package from Rockwell Automation, Inc. It is used to develop and run... A remote code execution vulnerability exists in Rockwell Automation FactoryTalk View Site Edition, which can be exploited by an attacker to cause...

CVE-2024-7513 Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions...

Rockwell Automation FactoryTalk View Site Edition (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View Site Edition Vulnerability : Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

PT-2024-38401

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View Site Edition affected versions not specified Description A code execution issue exists in the affected product due to improper default file permissions. This allows any user to edit or replace files that ar...

Rockwell Automation FactoryTalk View Site Edition Input Verification DoS

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...