What’s Vulnerable › Vulnerabilities

CVE-2026-12661: FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

• Severity: medium (CVSS 4.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-01 · updated 2026-09-01
• Weakness: CWE-121

Description

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.

Affected products

• Rockwell Automation FactoryTalk® Historian Machine Edition: Series C: 7.101 Series B: 5.202

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1796.html

Get alerted when CVE-2026-12661 or the next vulnerability affects your stack