Rockwellautomation has 12 CVEs on record between 2025 and 2026. The median CVSS is 7.8 (high), with 3 rated critical. None have a confirmed exploitation report. Most affected products: 1783-natr_firmware (3), factorytalk_linx (2), factorytalk_view (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 1
Products
- 1783-natr_firmware 3
- factorytalk_linx 2
- factorytalk_view 2
- Studio 1
- arena 1
- controllogix_5580_firmware 1
Worst active — by depth score
CVE-2019-25276High· 7.8Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path55CVE-2025-9063Critical· 9.8An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control54CVE-2025-7328Critical· 9.8Multiple Broken Authentication security issues exist in the affected product54CVE-2025-9064Critical· 9.1A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system50CVE-2025-9364High· 8.8An open database issue exists in the affected product and version48
Rockwellautomation vulnerabilities
CVEs affecting Rockwellautomation, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2026-9108High· 7.5A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files
A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during …
CVE-2019-25276High· 7.8PoCStudio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path
Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted pa…
CVE-2025-11918High· 7.3Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability
Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affect…
CVE-2025-9068High· 7.8A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and …
CVE-2025-9067High· 7.8A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the laun…
CVE-2025-9064Critical· 9.1A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerabilit…
CVE-2025-9063Critical· 9.8An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the …
CVE-2025-7330Medium· 6.5A cross-site request forgery security issue exists in the product and version listed
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convinc…
CVE-2025-7329Medium· 4.8A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable
A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special cha…
CVE-2025-7328Critical· 9.8Multiple Broken Authentication security issues exist in the affected product
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, …
CVE-2025-9364High· 8.8An open database issue exists in the affected product and version
An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.
CVE-2025-9166High· 7.5A denial-of-service security issue exists in the affected product and version
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.