Inductive Automation vulnerabilities

Products

• Ignition 28
• Ignition 8 Gateway 5

Newest

• inductive automation ignition Inductive Automation Ignition Software Incorrect Authorization CVE-2026-92817 8.7 HighOctober 13, 2026
• inductive automation ignition Inductive Automation Ignition Incorrect Default Permissions CVE-2026-77393 8.7 HighSeptember 4, 2026
• inductive automation ignition software, inductiveautomation ignition +1 more Inductive Automation Ignition Software Deserialization of Untrusted Data CVE-2025-13913 5.4 MediumMarch 12, 2026
• inductive automation ignition Inductive Automation Ignition Execution with Unnecessary Privileges CVE-2025-13911 7.3 HighDecember 18, 2025
• inductive automation ignition Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability CVE-2023-50233 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability CVE-2023-50232 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50223 EPSS 54.9% 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50222 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50221 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50220 7.2 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50219 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-50218 EPSS 55.0% 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability CVE-2023-39477 7.5 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-39476 9.8 CriticalMay 3, 2024
• inductive automation ignition Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-39475 EPSS 64.1% 9.8 CriticalMay 3, 2024
• inductive automation ignition Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability CVE-2023-39474 8.0 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2023-39473 EPSS 62.5% 8.8 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability CVE-2023-39472 6.5 MediumMay 3, 2024
• inductive automation ignition Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability CVE-2023-38124 EPSS 59.6% 7.2 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability CVE-2023-38123 7.5 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability CVE-2023-38122 7.2 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability CVE-2023-38121 8.3 HighMay 3, 2024
• inductive automation ignition Inductive Automation Ignition CVE-2022-1704 7.6 HighAugust 5, 2022
• inductive automation ignition This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-35873 7.8 HighJuly 25, 2022
• inductive automation ignition This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-35872 7.8 HighJuly 25, 2022
• inductive automation ignition This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-35871 EPSS 41.0% 8.1 HighJuly 25, 2022
• inductive automation ignition This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-35870 EPSS 44.3% 8.8 HighJuly 25, 2022
• inductive automation ignition This vulnerability allows remote attackers to bypass authentication on affected installations of... CVE-2022-35869 EPSS 59.9% 7.5 HighJuly 25, 2022
• inductive automation ignition Inductive Automation Ignition CVE-2022-1264 6.8 MediumJuly 20, 2022
• inductiveautomation ignition, inductive automation ignition 7 gateway, ignition 8 gateway +2 more ICSA-20-147-01 Inductive Automation Ignition (Update B) CVE-2020-14479 5.3 MediumApril 1, 2022
• inductive automation ignition 8 gateway, inductiveautomation ignition gateway +1 more The affected product is vulnerable to the handling of serialized data. The issue results from the... CVE-2020-12000 7.5 HighJune 9, 2020
• inductive automation ignition 8 gateway, inductiveautomation ignition gateway +1 more The affected product lacks proper validation of user-supplied data, which can result in... CVE-2020-10644 Public exploit EPSS 20.2% 7.5 HighJune 9, 2020
• inductive automation ignition 8 gateway, inductiveautomation ignition gateway +1 more The affected product lacks proper authentication required to query the server on the Ignition 8... CVE-2020-12004 Public exploit EPSS 14.0% 7.5 HighJune 9, 2020
• inductive automation ignition 8 gateway, inductiveautomation ignition gateway +1 more An unprotected logging route may allow an attacker to write endless log statements into the... CVE-2020-10641 7.5 HighApril 28, 2020