Vulnerabilities

CVSS

8.3 High

Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Risk score

66.4

Published

2026-06-16

Status

Published

A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.

Weaknesses

CWE-862

Coverage 1

vulnerability

Rockwell Automation FactoryTalk Analytics PavilionX

This advisory from CISA details a critical vulnerability in Rockwell Automation’s FactoryTalk Analytics PavilionX software, specifically versions below 7.01. The flaw, stemming from improper authorization enforcement in…

CISA Advisories · Jun 16, 2026 Critical

CVE-2025-14272UScveauthorizationapi

All articles mentioning it

Advisories and references

• rockwellautomation.com/en-us/trust-center/security-advisories/adviso...