Skip to content
OpenAdvisories

Vendor

Inductive Automation

30 known vulnerabilities.

Inductive Automation at a glance

Last 12 months
4
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Ignition 28 Ignition Software 1 Ignition 7 Gateway 1 Ignition 8 Gateway 1 Ignition 8 0

Latest advisories

  • High max 8.8
    ICSA-26-286-01 1 CVE

    Inductive Automation Ignition Software

    Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.

    Inductive Automation
  • High max 8.8
    ICSA-26-246-06 1 CVE

    Inductive Automation Ignition

    Successful exploitation of this vulnerability could allow any authenticated user to create projects.

    Inductive Automation
  • Medium max 6.4
    ICSA-25-352-01 1 CVE rev. 2

    Inductive Automation Ignition (Update A)

    Successful exploitation of this vulnerability could allow an attacker to be granted direct SYSTEM-level code execution on the host operating system running the Ignition Gateway service on Windows systems.

    Inductive Automation
    first Dec 18, 2025
  • Medium max 6.3
    ICSA-26-071-06 1 CVE rev. 2

    Inductive Automation Ignition Software

    Successful exploitation of this vulnerability could allow an attacker to execute malicious code with OS application service account permissions that the authenticated, privileged application user did not intend on running.

    Inductive Automation
    first Mar 12, 2026
  • Critical
    ICSA-15-090-01 1 CVE rev. 2

    Inductive Automation Ignition Vulnerabilities

    Inductive Automation
    first Jan 1, 2015
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • High 8.8
    CVE-2026-92817

    Inductive Automation Ignition Software Incorrect Authorization

    The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges.…

    Inductive Automation Ignition
  • High 8.8
    CVE-2026-77393

    Inductive Automation Ignition Incorrect Default Permissions

    In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no…

    Inductive Automation Ignition
  • Medium 6.3
    CVE-2025-13913

    Inductive Automation Ignition Software Deserialization of Untrusted Data

    A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.

    Inductive Automation Ignition Software
  • Medium 6.4
    CVE-2025-13911

    Inductive Automation Ignition Execution with Unnecessary Privileges

    Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway Administrator privileges …

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50233

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is requi…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50232

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to ex…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50223 EPSS 55%

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authent…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50222

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. U…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50221

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignit…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50219

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is re…

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-50220

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication …

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-50218 EPSS 55%

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication i…

    Inductive Automation Ignition
  • High 7.5
    CVE-2023-39477

    Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

    Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication i…

    Inductive Automation Ignition
  • Critical 9.8
    CVE-2023-39476

    Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authen…

    Inductive Automation Ignition
  • Critical 9.8
    CVE-2023-39475 EPSS 64%

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 8.0
    CVE-2023-39474

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit…

    Inductive Automation Ignition
  • High 8.8
    CVE-2023-39473 EPSS 62%

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authe…

    Inductive Automation Ignition
  • Medium 6.5
    CVE-2023-39472

    Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability

    Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authent…

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-38124 EPSS 60%

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. …

    Inductive Automation Ignition
  • High 7.2
    CVE-2023-38122

    Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Although aut…

    Inductive Automation Ignition
  • High 7.5
    CVE-2023-38123

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition.…

    Inductive Automation Ignition
  • High 8.3
    CVE-2023-38121

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is re…

    Inductive Automation Ignition
  • High 7.6
    CVE-2022-1704

    Inductive Automation Ignition

    Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.

    Inductive Automation Ignition
  • High 7.8
    CVE-2022-35873

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 7.8
    CVE-2022-35872

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 8.1
    CVE-2022-35871 EPSS 41%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 8.8
    CVE-2022-35870 EPSS 44%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation …

    Inductive Automation Ignition
  • High 7.5
    CVE-2022-35869 EPSS 60%

    This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation I…

    Inductive Automation Ignition
  • Medium 6.8
    CVE-2022-1264

    Inductive Automation Ignition

    The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.

    Inductive Automation Ignition
  • Medium 5.3
    CVE-2020-14479

    ICSA-20-147-01 Inductive Automation Ignition (Update B)

    Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

    Inductive Automation Ignition 7 Gateway Ignition 8 Gateway