PatchTheCVEthinmanager vulnerabilities and fixes
Recent CVEs affecting thinmanager, with upgrade or downgrade steps. 5 tracked.
thinmanager has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-09-09. Highest priority: CVE-2024-10386 (score 67/100).
- CVE-2025-9065 HIGH 8.8 UPGRADE A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to th
- CVE-2025-3618 MEDIUM 5.5 UPGRADE A denial-of-service vulnerability exists in the Rockwell Automation ThinManager
- CVE-2025-3617 HIGH 7.8 UPGRADE A privilege escalation vulnerability exists in the Rockwell Automation ThinManager
- CVE-2024-10387 HIGH 7.5 UPGRADE CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product
- CVE-2024-10386 CRITICAL 9.8 UPGRADE CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product
FAQ
How do I fix thinmanager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thinmanager being exploited right now?
None of the tracked thinmanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thinmanager CVE should I patch first?
CVE-2024-10386 currently ranks highest (67/100): CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product.