CVE-2026-9127
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
20/100
Published: 2026-07-14
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
Active
S:
X
AT:
Present
VC:
High
VI:
High
VA:
High
Description
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| rockwellautomation | studio_5000_logix_designer | < 32.04 |
| rockwellautomation | studio_5000_logix_designer | 35.00 |
References & Advisories (1)
Vendor Advisory