Rockwell Automation FactoryTalk Activation Manager
CISA details CVE-2026-16675, a CVSS 7.8 privilege escalation flaw in Rockwell FactoryTalk Activation Manager V5.02 and below, with vendor fixes available.
CISA issued an ICS advisory for Rockwell Automation FactoryTalk Activation Manager. CVE-2026-16675 is a privilege escalation vulnerability stemming from installer custom actions, scored 7.8. Versions V5.02 and below are affected, and Rockwell Automation has released fixes.
- CVE-2026-16675 enables privilege escalation
- FactoryTalk Activation Manager V5.02 and below affected
- CVSS v3 base score of 7.8
- Fix provided by Rockwell Automation
- CVEs
- CVE-2026-16675
- Vendors
- Rockwell Automation
- Products
- FactoryTalk Activation Manager
- Organizations
- CISARockwell Automation
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-16675 | Local privilege escalation to SYSTEM in Rockwell Automation FactoryTalk Activation Manager | 8.5 | <1% |
From the original article
View CSAF Summary The following versions of Rockwell Automation FactoryTalk Activation Manager are affected: FactoryTalk Activation Manager V5. 02_and_below (CVE-2026-16675) CVSS Vendor Equipment Vulnerabilities v3 7.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.