Skip to content
OpenAdvisories
High ICSA-26-020-03 2 CVEs

Rockwell Automation Verve Asset Manager

Published Jan 20, 2026 · Updated Jan 20, 2026

Vendor: Rockwell Automation Product: Verve Asset Manager

Summary

Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within the ADI server.

Vulnerabilities 2

  • High 8.8
    CVE-2025-14377

    Verve Asset Manager – Plaintext Storage Vulnerabilities

    A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 202…

    Rockwell Automation Verve Asset Manager ICS / OT
  • High 8.6
    CVE-2025-14376

    Verve Asset Manager – Plaintext Storage Vulnerabilities

    A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

    Rockwell Automation Verve Asset Manager ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation's security advisory

References