Description
A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk Analytics PavilionX | 7.0 | — |
Advisories 2
- WID-SEC-2026-1960 Rockwell Automation FactoryTalk (Analytics PavilionX): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 16, 2026
- ICSA-26-167-01 Rockwell Automation FactoryTalk Analytics PavilionX CISA ICS & IT advisories · Jun 16, 2026