Vulnerability · Published Sep 1, 2026 · Assigned by Rockwell
CVE-2026-16675Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation
High 8.5
In plain English
A high-severity security flaw in FactoryTalk® Activation Manager from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Official description
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | FactoryTalk® Activation Manager | Version 5.02 and below |
Weakness: CWE-307 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N