As cited
Copy frozen at (site build).
vulnerabilities
Inductive Automation Ignition Software
CVE-2026-92817 affects Inductive Automation Ignition versions 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8, where an authenticated low-level user can escalate privileges to Designer level by misusing a Vision session identifier. Successful exploitation allows arbitrary code execution within the Ignition Gateway process. Inductive Automation released patches in August 2025 (version 8.3.9) and September 2026 (version 8.1.55) to address the flaw.
Why it matters: Critical manufacturing and energy organizations running affected Ignition versions face remote code execution risk from any authenticated Vision user; immediate patching to 8.1.55 or 8.3.9 is required to eliminate the privilege escalation path.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Inductive Automation Ignition Software
Inductive Automation released patches for CVE-2026-92817, a privilege escalation vulnerability in Ignition software affecting versions 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8. An authenticated user with Vision project access could provide a valid Vision session identifier to gain Designer-level privileges and execute arbitrary code in the Ignition Gateway process. Patches are available as version 8.3.9 (released August 2025) and version 8.1.55 (released September 2026).
Why it matters: Organizations running affected Inductive Automation Ignition versions in critical manufacturing and energy environments need to patch immediately to prevent authenticated privilege escalation and remote code execution with a CVSS 4.0 score of 8.7.
- Source published
- First seen by Cybersecurity Tracker