Skip to content
OpenAdvisories
High ICSA-26-244-06 2 CVEs

Rockwell Automation Historian ME

Published Sep 1, 2026 · Updated Sep 9, 2026 · Revision 2

Vendor: Rockwell Automation Product: Series B Product: Series C

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed; an out-of-bounds write condition may allow remote code execution.

Vulnerabilities 2

  • High 8.6
    CVE-2025-12768

    FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

    A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

    Rockwell Automation FactoryTalk® Historian Machine Edition ICS / OT
  • Medium 4.8
    CVE-2026-12661

    FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

    A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to c…

    Rockwell Automation FactoryTalk® Historian Machine Edition ICS / OT

Revision history

  1. #2

    Revision - Removed a typo in the vulnerability description

  2. #1

    Initial Publication

References