CVE-2026-9108: studio 5000 logix designer 36.00; +1 more affected products

Affected technology

studio 5000 logix designer · before 32.05 (exclusive)
rockwellautomation

studio 5000 logix designer · from 33.00 (inclusive), before 33.04 (exclusive)
rockwellautomation

studio 5000 logix designer · from 34.00 (inclusive), before 34.04 (exclusive)
rockwellautomation

studio 5000 logix designer · from 35.00 (inclusive), before 35.02 (exclusive)
rockwellautomation

studio 5000 logix designer · 36.00
rockwellautomation

Studio 5000 Logix Designer · V36.00, 35.00,35.01, 34.00-34.03, 33.00-33.03, 32.00-32.04 and older
Rockwell Automation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Active user interaction

What an attacker can do

The source says if exploited, an attacker could craft a malicious ACD project file that results in arbitrary files being written to attacker-controlled locations on the file system, potentially leading to code execution. Vendor/CNA’s CVSS 4.0 assessment (base score 5.4/10) rates confidentiality, integrity and availability impact as high.