Vulnerabilities

CVSS

9.2 Critical

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Risk score

73.6

Published

2026-06-16

Status

Published

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token.

Weaknesses

CWE-362

Coverage 1

vulnerability

Rockwell Automation FactoryTalk Historian Site Edition

This advisory from CISA details vulnerabilities in Rockwell Automation’s FactoryTalk Historian Site Edition software, specifically versions through 11.00. Exploitation could lead to denial-of-service attacks or authentic…

CISA Advisories · Jun 18, 2026 Medium

CVE-2025-13036CVE-2025-44019CVE-2025-36539USfactorytalkhistorianrockwellautomation

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...