Vulnerability · Published Sep 2, 2026 · Assigned by Rockwell
CVE-2024-7956Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud
High 7.6
In plain English
A high-severity improper authentication in DataMosaix™ Private Cloud from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 4.0)7.6High
Exploit odds (30 days)0.4%top 71.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | DataMosaix™ Private Cloud | <=7.07 |
Weakness: CWE-287 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N