CVE-2026-16675

Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation

CVSS 8.5 high · Rockwell Automation FactoryTalk® Activation Manager · published 2026-09-01

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.

NVD · CVE.org

Coverage 1 source

1. 2026-09-01 CISA Cybersecurity Advisories high Rockwell Automation FactoryTalk Activation Manager

   Rockwell Automation FactoryTalk Activation Manager versions V5.02 and below have a vulnerability allowing excessive authentication attempts.

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28