What’s Vulnerable › Vulnerabilities

CVE-2025-9036: Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime Vulnerability

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-14 · updated 2026-06-17
• Weakness: CWE-200

Description

A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.

Affected products

• Rockwell Automation FactoryTalk® Action Manager: through Version 1.0.0

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1740.html

Get alerted when CVE-2025-9036 or the next vulnerability affects your stack