PT-2026-52534 · Horner Automation · Cscape

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-12897

NVD

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-12897

Affected Products

Cscape

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-12897 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-176-03 · Note