HIGH 7.0 NVD

CVE-2026-12663

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This cou

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1793.

Published: 2026-09-01 · Source: NVD · Feed updated: 2026-09-01

This high severity vulnerability with a CVSS score of 7.0 was published on 2026-09-01 via NVD.

vulnfeed aggregates 11520 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.