Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-9128— Studio 5000 Logix Designer® – Multiple Vulnerabilities

Quick assessment

Affected

Rockwell Automation Studio 5000 Logix Designer

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Rockwell Automation Studio 5000 Logix Designer是美国Rockwell Automation基金会的一款自动化控制编程软件。 Rockwell Automation Studio 5000 Logix Designer存在权限许可和访问控制问题漏洞，该漏洞源于External Tools配置中未包含引号的搜索路径问题，可能导致攻击者利用路径中包含空格，将恶意可执行文件放置在搜索顺序中较早的位置，从而实现任意代码执行。以下版本受到影响：V35.00版本、34.00

AI Predicted 6.5 Difficulty: Easy EPSS 0.17% · P6 Updated Jul 15, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Rockwell Automation	Studio 5000 Logix Designer	`V35.00, 34.00-34.02, 33.00-33.02, 32.00-32.04 and older`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-9128

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Studio 5000 Logix Designer® – Multiple Vulnerabilities

Source: CVE Program / CVE List V5

Vulnerability Description

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. If exploited, an attacker could plant a malicious executable in a location within the search path, resulting in arbitrary code execution with the same permissions of the user running the application.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Source: CVE Program / CVE List V5

Vulnerability Type

未经引用的搜索路径或元素

Source: CVE Program / CVE List V5

Vulnerability Title

Rockwell Automation Studio 5000 Logix Designer 权限许可和访问控制问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Rockwell Automation	Studio 5000 Logix Designer	V35.00, 34.00-34.02, 33.00-33.02, 32.00-32.04 and older	-

II. Public POCs for CVE-2026-9128

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-9128

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-9128 (1)

🔗 SD1783 | Security Advisory | Rockwell Automation | US Read full article

https://www.cve.org/CVERecord?id=CVE-2026-9128

Same Patch Batch · Rockwell Automation · 2026-07-14 · 17 CVEs total

CVE-2025-12011	9.2 CRITICAL	CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
CVE-2026-10573	6.3 MEDIUM	1734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object
CVE-2026-8085		Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-8314		Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-8313		Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-9653		1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID
CVE-2026-9140		1718-AENTR/1719-AENTR - Denial of Service
CVE-2026-10714		Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Vali
CVE-2025-12012		CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
CVE-2026-11917		ThinManager® - Path Traversal via API
CVE-2026-9108		Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-9636		Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module
CVE-2026-9292		Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting
CVE-2026-9127		Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-12659		Rockwell Automation Flex 5000® Adapter - Denial of Service
CVE-2025-11698		CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

IV. Related Vulnerabilities

Same product: Studio 5000 Logix Designer

Same vendor: Rockwell Automation

Same weakness: CWE-428