What’s Vulnerable › Vulnerabilities

CVE-2024-7956: Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud

• Severity: high (CVSS 7.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-02 · updated 2026-10-27
• Weakness: CWE-287

Description

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.

Affected products

• Rockwell Automation DataMosaix™ Private Cloud: through 7.07

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1702.html

Get alerted when CVE-2024-7956 or the next vulnerability affects your stack