Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-92817, Summary: Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.
Classification: Severe, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-107605, CVE-2026-107606, CVE-2026-107607, CVE-2026-92817, Summary: CISA released two Industrial Control Systems (ICS) Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. *ICSA-26-286-01 Inductive Automation Ignition Software *ICSA-26-286-02 Swann Communications SWIFI-SE2KIC
Serial Number: AV26-892Date: September 8, 2026 As of September 4, 2026, Inductive Automation is affected by a vulnerability in the following product: Ignition Prior to or equal to 8.1.53 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CSAF/csaf_files/OT/white/2026/icsa-26-246-06.json at develop · cisagov/CSAF · GitHub Inductive Automation Ignition | CISA
View CSAF Summary Successful exploitation of this vulnerability could allow any authenticated user to create projects. The following versions of Inductive Automation Ignition are affected: Ignition <=8.1.53 (CVE-2026-77393) CVSS Vendor Equipment Vulnerabilities v3 8.8 Inductive Automation Inductive Automation Ignition Incorrect Default Permissions Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Information Technology Countries/Areas Deployed: Worldwide Company…