[ CVE-2026-92817 · Published 14 Oct 2026 ]
Vulnerability in Inductive Automation Ignition
CVSS 8.8
EPSS <1%No fix listed yet
[ Description ]Official description
The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.