CVE-2025-14272CWE-862broken-access-control

CVE-2025-14272

published June 16, 2026

CVSS
8.3
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.

The record
Technical detail
CVSS
8.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-16T19:16Z
References (1)
EPSS history
Timeline
  • 16 JUN 13:51Z
    Rockwell Automation FactoryTalk Analytics PavilionX
    cvelistv5