2
CVEs
0
Critical
2
High
0
KEV
0
PoC
2
Unpatched C/H
0.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Arena
38
Micrologix 1100 Firmware
14
Thinmanager
13
Armorstart St 284Ee Firmware
10
Factorytalk View
10
Micrologix 1400 Firmware
10
Armorstart St 281E Firmware
10
Factorytalk Services Platform
8
1763 L16Awa Series A
8
Compactlogix 5380 Firmware
8
1763 L16Bwa Series A
8
1763 L16Dwd Series A
8
1763 L16Bbb Series B
8
1763 L16Bwa Series B
8
1763 L16Awa Series B
8
1763 L16Bbb Series A
8
1763 L16Dwd Series B
8
1766 L32Awaa Series A
7
Guardlogix 5580 Firmware
7
1766 L32Awa Series A
7
1766 L32Bxb Series B
7
1756 Enbt
7
Controllogix Controllers
7
Compactlogix 5480 Firmware
7
Softlogix
7
Micrologix
7
1768 Enbt
7
1766 L32Awaa Series B
7
Compactlogix L32E Controller
7
1766 L32Bxba Series B
7
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-11917 | Arbitrary file write in Rockwell Automation FactoryTalk ThinManager allows an authenticated attacker to abuse a path traversal flaw in the software's API, saving files outside the application's intended directory into restricted system locations. Because CWE-22 file-write primitives on a Windows-based OT management server commonly enable code execution or service disruption, this carries an integrity and availability impact (CVSS 4.0 base 7.2). There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV. | HIGH | 7.2 | 0.3% | 36 |
No patch
|
| CVE-2025-11918 | Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available. | HIGH | 7.1 | 0.0% | – |
No patch
|