7.3
High
CVE-2026-9127 A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on…
Description
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Studio 5000 Logix Designer | Versions not published |
Other CVEs of Studio 5000 Logix Designer
The 4 CVEs of Studio 5000 Logix Designer →
CVE-2026-9128
A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External…
7.3
High
CVE-2026-9108
A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths…
5.4
Medium
CVE-2022-1159
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator…
7.7
High