4
CVEs
0
Critical
4
High
0
KEV
0
PoC
4
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
4
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Arena
44
Thinmanager
16
Factorytalk View
14
Micrologix 1100 Firmware
14
Controllogix 5580 Firmware
13
Compactlogix 5380 Firmware
12
Factorytalk Linx
12
Guardlogix 5580 Firmware
12
Micrologix 1400 Firmware
11
Compactlogix 5480 Firmware
11
Armorstart St 284Ee Firmware
10
Armorstart St 281E Firmware
10
Factorytalk Services Platform
9
Armorstart Lt Firmware
9
1763 L16Bbb Series A
8
1763 L16Bwa Series A
8
1763 L16Bbb Series B
8
1763 L16Dwd Series B
8
Compact Guardlogix 5380 Firmware
8
1763 L16Awa Series A
8
1763 L16Awa Series B
8
1763 L16Dwd Series A
8
1763 L16Bwa Series B
8
1766 L32Awa Series A
7
Compactlogix
7
1794 Aentr Flex I O Ethernet Ip Adapter
7
1768 Eweb
7
1756 Enbt
7
Compactlogix L32E Controller
7
1766 L32Bwaa Series A
7
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-8085 | Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the model.exe (Siman) component when a victim opens a maliciously crafted simulation model file. The flaw lets an attacker run code in the context of the current user by tricking an operator or engineer into opening a booby-trapped file, making it a client-side, file-delivery RCE rather than a remotely reachable network service bug. No public exploit has been identified at time of analysis, and no EPSS or CISA KEV data was provided, so real-world exploitation appears limited to social-engineering-driven targeting. | HIGH | 7.0 | 0.1% | 35 |
No patch
|
| CVE-2026-8312 | Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the expmt.exe (Siman) component, which fails to validate user-supplied data when parsing model/experiment files. A local attacker who convinces an engineer to open a malicious Arena file can run code in the context of the current user. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV; it was self-reported by Rockwell's PSIRT (advisory SD1784). | HIGH | 7.0 | 0.1% | 35 |
No patch
|
| CVE-2026-8313 | Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the linker.exe (Siman) component, which fails to properly validate user-supplied data parsed from simulation model files. A local attacker who convinces a user to open a specially crafted Arena file can corrupt memory and run code in the context of the current user. No public exploit has been identified at time of analysis, the issue is not in CISA KEV, and no EPSS score was provided, so real-world exploitation appears theoretical rather than observed. | HIGH | 7.0 | 0.1% | 35 |
No patch
|
| CVE-2026-8314 | Arbitrary code execution in Rockwell Automation Arena Simulation is possible through an out-of-bounds write in the siman.exe (Siman) simulation-language component, which mishandles user-supplied data when parsing a model file. An attacker who convinces a user to open a crafted Arena file can run code in the context of that user's process. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so risk is currently theoretical rather than actively exploited. | HIGH | 7.0 | 0.1% | 35 |
No patch
|