CVE-2026-9127

EUVD-2026-43708
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4.46%
Affected Products (NVD)
VendorProductVersion
rockwellautomationstudio_5000_logix_designer
𝑥
≤ 32.04
rockwellautomationstudio_5000_logix_designer
33.00 ≤
𝑥
< 33.02
rockwellautomationstudio_5000_logix_designer
34.00 ≤
𝑥
< 34.02
rockwellautomationstudio_5000_logix_designer
35.00
𝑥
= Vulnerable software versions