CVE-2026-61389: AutomationDirect Productivity Suite Out-of-bounds Write

Published Jul 16, 2026

Updated

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.

Affected Software

1 affected component

AutomationDirect Productivity Suite

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade AutomationDirect Productivity Suite to a version that resolves this vulnerability.
Fixed in v4.7.0.47

Event History

Jul 16, 2026

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-61389?

CVE-2026-61389 has a high severity rating of 7.

How do I fix CVE-2026-61389?

To fix CVE-2026-61389, apply the latest security patches provided by AutomationDirect for the Productivity Suite.

What are the potential impacts of CVE-2026-61389?

CVE-2026-61389 can lead to kernel memory corruption, privilege escalation, or system instability.

Who can exploit CVE-2026-61389?

CVE-2026-61389 can be exploited by a local attacker with minimal privileges.

What software is affected by CVE-2026-61389?

The affected software for CVE-2026-61389 is AutomationDirect Productivity Suite.