https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-0498.htmlhttps://patchthecve.com/cve/CVE-2025-0498.htmlWed, 17 Jun 2026 08:26:36 +0000CRITICAL 9.8: A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.https://patchthecve.com/cve/CVE-2025-0497.htmlhttps://patchthecve.com/cve/CVE-2025-0497.htmlWed, 17 Jun 2026 08:26:36 +0000CRITICAL 9.8: A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.https://patchthecve.com/cve/CVE-2025-0477.htmlhttps://patchthecve.com/cve/CVE-2025-0477.htmlWed, 17 Jun 2026 08:26:33 +0000CRITICAL 9.8: An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.