WID-SEC-W-2026-3143

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Rockwell Automation FactoryTalk Activation Manager und Historian Machine Edition: Mehrere Schwachstellen

view advisory published 2026-09-01

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um beliebigen Programmcode auszuführen, Administratorrechte zu erlangen oder einen Denial-of-Service-Zustand auszulösen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-16675US——
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console window…
CVE-2026-12661US——
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web in…
CVE-2025-12768US——
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution o…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan