CVE-2026-12661: FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
Published Sep 1, 2026
·Updated
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.
Affected Software
1 affected component
Rockwell Automation FactoryTalk Historian Machine Edition
Event History
Sep 1, 2026
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments should be prioritized for remediation?
Prioritize FactoryTalk Historian Machine Edition deployments where authenticated users on an adjacent network can reach the web interface. The described issue requires both authentication and network-adjacent access.
2
What operational impact should responders expect if exploitation succeeds?
Crafted requests to the web interface can trigger buffer overflow conditions that crash the device and leave it unresponsive, resulting in denial of service.