Vulnerability Details CVE-2026-9127
A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the application. If exploited, an attacker could alter the configuration to point to a malicious executable, resulting in arbitrary code execution when any user interacts with the external tools functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.3%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2026-9127
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:21.0
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.0
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.00
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.01
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.02
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.04
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:33.00
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:34.00
-
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:35.00