Known Vulnerabilities for products from Rockwellautomation

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Rockwellautomation".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by Rockwellautomation can be found at device.report : Rockwellautomation

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-9128 json A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External T... Not Provided 2026-07-14 2026-08-25
CVE-2026-9127 json A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a conf... Not Provided 2026-07-14 2026-08-25
CVE-2026-9108 json A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ... Not Provided 2026-07-14 2026-08-25
CVE-2026-8314 json A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) componen... Not Provided 2026-07-14 2026-07-15
CVE-2026-8313 json A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) componen... Not Provided 2026-07-14 2026-07-15
CVE-2026-8312 json A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component... Not Provided 2026-07-14 2026-07-15
CVE-2026-8085 json A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component... Not Provided 2026-07-14 2026-07-15
CVE-2025-11918 json Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the par... Not Provided 2025-11-14 2026-10-07
CVE-2025-9364 json An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis ins... Not Provided 2025-09-09 2026-10-01
CVE-2025-9166 json A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller r... Not Provided 2025-09-09 2026-10-01
CVE-2025-9068 json A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality... Not Provided 2025-10-14 2026-10-08
CVE-2025-9067 json A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with va... Not Provided 2025-10-14 2026-10-08
CVE-2025-9064 json A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the sam... Not Provided 2025-10-14 2026-10-08
CVE-2025-9063 json An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploita... Not Provided 2025-10-14 2026-10-08
CVE-2025-7330 json A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CS... Not Provided 2025-10-14 2026-10-08
CVE-2025-7329 json A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to ... Not Provided 2025-10-14 2026-10-08
CVE-2025-7328 json Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authenti... Not Provided 2025-10-14 2026-10-08
CVE-2023-46290 json Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user tok... 8.1 - HIGH 2023-10-27 2023-11-07
CVE-2023-46289 json Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat ... 7.5 - HIGH 2023-10-27 2023-11-07
CVE-2023-29464 json FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory... 9.1 - CRITICAL 2023-10-13 2023-10-20

Known software with vulnerabilities from Rockwellautomation

Type Vendor Product Version
HardwareRockwellautomation1100-
HardwareRockwellautomation1400-
HardwareRockwellautomation1756-enbt-
HardwareRockwellautomation1756-eweb-
ApplicationRockwellautomation1763-l16awa Series A15.000
ApplicationRockwellautomation1763-l16awa Series B15.000
ApplicationRockwellautomation1763-l16bbb Series A15.000
ApplicationRockwellautomation1763-l16bbb Series B15.000
ApplicationRockwellautomation1763-l16bwa Series A15.000
ApplicationRockwellautomation1763-l16bwa Series B15.000
ApplicationRockwellautomation1763-l16dwd Series A15.000
ApplicationRockwellautomation1763-l16dwd Series B15.000
HardwareRockwellautomation1768-enbt-
HardwareRockwellautomation1768-eweb-
HardwareRockwellautomation1768 Compactlogix L4x Controller-
Operating
System
Rockwellautomation1768 Compactlogix L4x Controller Firmware16.00
HardwareRockwellautomation1768 Compact Guardlogix L4xs Controller-
Operating
System
Rockwellautomation1768 Compact Guardlogix L4xs Controller Firmware18.00
HardwareRockwellautomation1769 Compactlogix 5370 L1 Controller-
Operating
System
Rockwellautomation1769 Compactlogix 5370 L1 Controller Firmware20.00

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report