Vulnerabilities CVE-2026-11917

CVE-2026-11917

High

Open

TLP:CLEAR

ThinManager® - Path Traversal via API

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system directories outside of the application's intended directory.

Details

CVSS Score: 7.2
EPSS Score ⓘ: 0.32%

25.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 14, 2026
Last Modified: Jul 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.