CVE-2026-16675

highpriority · track · 0EPSS 0.001 · 3 %ileDEUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.14% (3rd) EPSS
CVSS 7.8 · high
Is it mine?
4 products
Check your exposure
Who says so?
2 sources
cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedFactoryTalk Activation Managercisa_csaf_ot

    Rockwell Automation recommends users update to software version V5.03.

  • MitigationFactoryTalk Activation Managercisa_csaf_ot

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.9–8.5

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v4.08.5highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · PSIRT@rockwellautomation.com
v4.05.9mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-307USCWE-307US
05

affected products (4)

Products and version ranges known to be affected.

06

advisories (2)

Vendor and ecosystem advisories describing this.

  • WID-SEC-W-2026-3143Rockwell Automation FactoryTalk Activation Manager und Historian Machine Edition: Mehrere SchwachstellenDeutsch2026-09-01csaf · cert_bundDE

    Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um beliebigen Programmcode auszuführen, Administratorrechte zu erlangen oder einen Denial-of-Service-Zustand auszulösen.

  • ICSA-26-244-04Rockwell Automation FactoryTalk Activation Manager2026-09-01icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

07

sources

Which sources assert this record, and when.

cert_bundcisa_csaf_otNVDCVE.orgMITRE
published 2026-09-01modified 2026-09-01
08

references (1) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan