Which versions of Factorytalk Services Platform are affected by EUVD-2026-43700?

Rockwell Automation FactoryTalk Services Platform (FTSP) contains a high-severity authentication bypass vulnerability (CVSS 8.8) that allows authenticated low-privilege users to impersonate…

How to fix or mitigate EUVD-2026-43700?

Within 24 hours, inventory all FTSP deployments and identify those using Okta Web Authentication; restrict administrative access through network controls and review authentication logs for suspicious token issuance or privilege escalation attempts. Within 7 days, implement network segmentation isolating FTSP systems, deploy comprehensive JWT token operation monitoring with real-time alerting for anomalous authentication patterns, and establish enhanced logging of all authentication events. Within 30 days, contact Rockwell Automation for patch availability and expected release timeline, evaluate alternative authentication mechanisms that do not depend on JWT validation, and conduct security assessment of all systems protected by affected FTSP instances.

Factorytalk Services Platform EUVD-2026-43700

Q: What is the CVSS score of EUVD-2026-43700?

EUVD-2026-43700 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-10714 HIGH

Weak Authentication (CWE-1390)

2026-07-14 Rockwell

GHSA-6w37-3rrj-mg8j

Authentication Bypass Factorytalk Services Platform Rockwell Automation

8.8

CVSS 4.0 · Vendor: Rockwell

Severity by source

Vendor (Rockwell) PRIMARY

8.8 HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (Rockwell) · only source for this CVE.

CVSS VectorVendor: Rockwell

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 15:37 vuln.today

CVE Published

Jul 14, 2026 - 15:02 cve.org

HIGH 8.8

DescriptionCVE.org

A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the algorithm to "none" and craft forged tokens. This could allow an authenticated low-privilege user to impersonate any authorized user on the FTSP server, resulting in unauthorized access to system configuration and the ability to grant permissions to other systems protected by FTSP.

AnalysisAI

Authentication bypass in Rockwell Automation FactoryTalk Services Platform (FTSP) lets an authenticated low-privilege user forge JWT tokens during Okta Web Authentication because the application fails to enforce the RSA signing algorithm, permitting the classic 'alg:none' attack. A successful attacker can impersonate any authorized user, reaching system configuration and granting permissions to other systems that FTSP protects. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the alg:none technique is well documented and trivially reproducible once access is obtained.