CVE-2026-12661CWE-121

CVE-2026-12661

published September 1, 2026

CVSS
4.8
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.

The record
Technical detail
CVSS
4.8 · NONE
CVSS v4.0
4.8 · CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-09-01T18:17Z
References (1)
EPSS history
Timeline
  • 03 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 01 SEP 13:41Z
    FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
    cvelistv5