Vulnerabilities

CVSS

8.4 High

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Risk score

67.2

Published

2026-06-25

Status

Published

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Weaknesses

CWE-125

Coverage 1

vulnerability

Horner Automation Cscape

This advisory details a critical vulnerability in Horner Automation’s Cscape software, specifically versions prior to 10.2_SP3. The vulnerability allows for out-of-bounds reads, potentially leading to information disclos…

CISA Advisories · Jun 25, 2026 Critical

CVE-2026-12897UScscapeout-of-boundsvulnerability

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-176-03