CVE-2026-77393 was published on 2026-09-04T22:17:18.333Z and has not been modified since then. The NVD entry is currently Received. This CVE details a vulnerability in Ignition 8.1.53 and earlier, where the Gateway 'Create Project Role(s)' setting shipped blank, allowing any authenticated user to create projects if they can execute gateway scripts. The issue was fixed in Ignition 8.1.54, which restricts p [truncated]
MEDIUMInductive AutomationCVE published 2026-03-12
CVE-2025-13913 is a medium-severity issue in Inductive Automation Ignition Software <8.3.0 where a privileged user importing an external file can trigger embedded malicious code during deserialization. CISA published the advisory on 2026-03-12 and issued a minor revision on 2026-03-13 to correct a reference typo. The supplied CVSS 3.1 vector is AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H, reflecting a prerequisit [truncated]
CVE-2025-13911 is a medium-severity vulnerability (CVSS 6.4) in Inductive Automation Ignition SCADA applications that use Python scripting. Published on December 18, 2025, the issue stems from insufficient security controls restricting Python library imports and execution within the scripting environment. The root cause is the Ignition service account possessing excessive system permissions beyond what pr [truncated]
