Inductive Automation Ignition Software

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-92817, Summary: Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první 13. 10. 2026 · zachyceno 14. 10. 2026 02:00 CZ · EN/orig

Inductive Automation výroba a průmysl energetika FI US

tg: zranitelnost tp: průmyslové systémy

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-92817	8.8 3.1 · icscert 8.7 4.0 · icscert	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.

Jak se o tom psalo 2

15. 10. 2026 · zachyceno 04:00 · NCSC-FI FI nadpis události

Inductive Automation Ignition Software

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-92817, Summary: Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.
13. 10. 2026 · zachyceno 14. 10. 2026 02:00 · CISA Advisories US

Inductive Automation Ignition Software

View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0|<=8.1.54 (CVE-2026-92817) Ignition >=8.3.0|<=8.3.8 (CVE-2026-92817) CVSS Vendor Equipment v3 8.8 Inductive Automation Ignition 1 Vulnerability Incorrect Authorization Background Critical Infrastructure Sectors: Critical Manufacturing, Energy,…