Vulnerability · Published Jul 14, 2026 · Assigned by Rockwell
CVE-2026-9127Studio 5000 Logix Designer® – Multiple Vulnerabilities
High 7.3
In plain English
A high-severity incorrect authorization in Studio 5000 Logix Designer from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).
Official description
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | Studio 5000 Logix Designer | V35.00,34.00,34.01, 33.00,33.02, 32.00-32.04 and older |
Weakness: CWE-863 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H