<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: inductiveautomation</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-13913: A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payl</title><link>https://patchthecve.com/cve/CVE-2025-13913.html</link><guid>https://patchthecve.com/cve/CVE-2025-13913.html</guid><pubDate>Wed, 17 Jun 2026 08:34:58 +0000</pubDate><description>MEDIUM 6.3: A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.</description></item><item><title>CVE-2023-50233: Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-50233.html</link><guid>https://patchthecve.com/cve/CVE-2023-50233.html</guid><pubDate>Wed, 17 Jun 2026 06:39:21 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that</description></item><item><title>CVE-2023-50232: Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-50232.html</link><guid>https://patchthecve.com/cve/CVE-2023-50232.html</guid><pubDate>Wed, 17 Jun 2026 06:39:21 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the targ</description></item><item><title>CVE-2023-50223: Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vu</title><link>https://patchthecve.com/cve/CVE-2023-50223.html</link><guid>https://patchthecve.com/cve/CVE-2023-50223.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulne</description></item><item><title>CVE-2023-50222: Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execut</title><link>https://patchthecve.com/cve/CVE-2023-50222.html</link><guid>https://patchthecve.com/cve/CVE-2023-50222.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit th</description></item><item><title>CVE-2023-50221: Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code </title><link>https://patchthecve.com/cve/CVE-2023-50221.html</link><guid>https://patchthecve.com/cve/CVE-2023-50221.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to expl</description></item><item><title>CVE-2023-50220: Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerabil</title><link>https://patchthecve.com/cve/CVE-2023-50220.html</link><guid>https://patchthecve.com/cve/CVE-2023-50220.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability</description></item><item><title>CVE-2023-50219: Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-50219.html</link><guid>https://patchthecve.com/cve/CVE-2023-50219.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability.

Th</description></item><item><title>CVE-2023-50218: Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerabili</title><link>https://patchthecve.com/cve/CVE-2023-50218.html</link><guid>https://patchthecve.com/cve/CVE-2023-50218.html</guid><pubDate>Wed, 17 Jun 2026 06:39:19 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability.</description></item><item><title>CVE-2023-39477: Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-39477.html</link><guid>https://patchthecve.com/cve/CVE-2023-39477.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>HIGH 7.5: Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this vulnerabil</description></item><item><title>CVE-2023-39476: Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution V</title><link>https://patchthecve.com/cve/CVE-2023-39476.html</link><guid>https://patchthecve.com/cve/CVE-2023-39476.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>CRITICAL 9.8: Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required to exploit this </description></item><item><title>CVE-2023-39475: Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote </title><link>https://patchthecve.com/cve/CVE-2023-39475.html</link><guid>https://patchthecve.com/cve/CVE-2023-39475.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>CRITICAL 9.8: Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not required </description></item><item><title>CVE-2023-39474: Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-39474.html</link><guid>https://patchthecve.com/cve/CVE-2023-39474.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the target mu</description></item><item><title>CVE-2023-39473: Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution </title><link>https://patchthecve.com/cve/CVE-2023-39473.html</link><guid>https://patchthecve.com/cve/CVE-2023-39473.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vul</description></item><item><title>CVE-2023-39472: Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerabil</title><link>https://patchthecve.com/cve/CVE-2023-39472.html</link><guid>https://patchthecve.com/cve/CVE-2023-39472.html</guid><pubDate>Wed, 17 Jun 2026 06:12:24 +0000</pubDate><description>MEDIUM 6.5: Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulne</description></item><item><title>CVE-2023-38124: Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execu</title><link>https://patchthecve.com/cve/CVE-2023-38124.html</link><guid>https://patchthecve.com/cve/CVE-2023-38124.html</guid><pubDate>Wed, 17 Jun 2026 06:09:29 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit thi</description></item><item><title>CVE-2023-38123: Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication </title><link>https://patchthecve.com/cve/CVE-2023-38123.html</link><guid>https://patchthecve.com/cve/CVE-2023-38123.html</guid><pubDate>Wed, 17 Jun 2026 06:09:28 +0000</pubDate><description>HIGH 8.8: Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition. User interaction is required to exploit </description></item><item><title>CVE-2023-38122: Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnera</title><link>https://patchthecve.com/cve/CVE-2023-38122.html</link><guid>https://patchthecve.com/cve/CVE-2023-38122.html</guid><pubDate>Wed, 17 Jun 2026 06:09:28 +0000</pubDate><description>HIGH 7.2: Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Although authentication is required to exploit this v</description></item><item><title>CVE-2023-38121: Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-38121.html</link><guid>https://patchthecve.com/cve/CVE-2023-38121.html</guid><pubDate>Wed, 17 Jun 2026 06:09:28 +0000</pubDate><description>CRITICAL 9.0: Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in t</description></item></channel></rss>