Inductive Automation

Products

ProductCVEsExploitedLatest
Ignition28–Oct 13, 2026
Ignition 7 Gateway1–Apr 1, 2022
Ignition 8 Gateway1–Apr 1, 2022
Ignition Software1–Mar 12, 2026

Exploited and recent CVEs

  • CVE-2026-92817 High 8.8 Inductive Automation Ignition Software Incorrect Authorization 0.5%
  • CVE-2026-77393 High 8.8 Inductive Automation Ignition Incorrect Default Permissions 0.5%
  • CVE-2025-13913 Medium 6.3 Inductive Automation Ignition Software Deserialization of Untrusted Data 0.3%
  • CVE-2025-13911 Medium 6.4 Inductive Automation Ignition Execution with Unnecessary Privileges 0.3%
  • CVE-2023-50233 High 8.8 Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability 2.1%
  • CVE-2023-50232 High 8.8 Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability 1.4%
  • CVE-2023-50223 High 8.8 Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability 54.9%
  • CVE-2023-50222 High 8.8 Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.1%
  • CVE-2023-50221 High 8.8 Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.1%
  • CVE-2023-50220 High 7.2 Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.8%
  • CVE-2023-50219 High 8.8 Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability 1.5%
  • CVE-2023-50218 High 8.8 Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability 55.0%
  • CVE-2023-39477 High 7.5 Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability 1.5%
  • CVE-2023-39476 Critical 9.8 Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability 2.2%
  • CVE-2023-39475 Critical 9.8 Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability 64.1%
  • CVE-2023-39474 High 8.0 Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability 0.6%
  • CVE-2023-39473 High 8.8 Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability 62.5%
  • CVE-2023-39472 Medium 6.5 Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability 1.3%
  • CVE-2023-38124 High 7.2 Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability 59.6%
  • CVE-2023-38123 High 7.5 Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability 1.2%
  • CVE-2023-38122 High 7.2 Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability 1.9%
  • CVE-2023-38121 High 8.3 Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability 1.2%
  • CVE-2022-1704 High 7.6 Inductive Automation Ignition 1.0%
  • CVE-2022-35873 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User interaction is required to exploit this vulne 0.7%
  • CVE-2022-35872 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User interaction is required to exploit this vulne 0.7%
  • CVE-2022-35871 High 8.1 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vul 41.0%
  • CVE-2022-35870 High 8.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although authentication is required to exploit thi 44.3%
  • CVE-2022-35869 High 7.5 This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vuln 59.9%
  • CVE-2022-1264 Medium 6.8 Inductive Automation Ignition 1.0%
  • CVE-2020-14479 Medium 5.3 ICSA-20-147-01 Inductive Automation Ignition (Update B) 0.9%