CVE-2025-13036CWE-362

CVE-2025-13036

published June 16, 2026

CVSS
9.2
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

An authentication

bypass security issue exists within FactoryTalk Historian Site Edition. By

continually sending requests to the login endpoint, an attacker may obtain a

valid authentication token.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-06-16T19:16Z
References (1)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1773.html · [email protected]
EPSS history
Timeline
  • 16 JUN 13:50Z
    Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass
    cvelistv5