Skip to content
OpenAdvisories
High ICSA-26-202-10 3 CVEs

Rockwell Automation Studio 5000 Logix Designer

Published Jul 21, 2026 · Updated Jul 21, 2026

Vendor: Rockwell Automation Product: Studio 5000 Logix Designer

Summary

Successful exploitation of these vulnerabilities could allow for a local attacker to execute arbitrary files, alter configurations, or execute arbitrary code.

Vulnerabilities 3

  • High 7.3
    CVE-2026-9127

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploite…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT
  • High 7.3
    CVE-2026-9128

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these pa…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT
  • Medium 5.4
    CVE-2026-9108

    Studio 5000 Logix Designer® – Multiple Vulnerabilities

    A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening pr…

    Rockwell Automation Studio 5000 Logix Designer ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation Security Advisory

References