Vendors › Inductive Automation

Inductive Automation security advisories

2 CISA ICS advisories for Inductive Automation in the last tracking window, 2 flagged as relevant to oil & gas. Newest first.

High 8.8 Oil & gas relevant ICSA-26-286-01 · Oct 13, 2026 · Inductive Automation

Inductive Automation Ignition Software

CISA reports 1 vulnerability in Inductive Automation Ignition. Weakness type: Incorrect Authorization. Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. Highest CVSS v3 score: 8.8 (High), exploitable over the network.

What to do: Prioritize: Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address this issue. Users are recommended to update to the newest version available.
High 8.8 Oil & gas relevant ICSA-26-246-06 · Sep 3, 2026 · Inductive Automation

Inductive Automation Ignition

CISA reports 1 vulnerability in Inductive Automation Ignition. Weakness type: Incorrect Default Permissions. Successful exploitation of this vulnerability could allow any authenticated user to create projects. Highest CVSS v3 score: 8.8 (High), exploitable over the network.

What to do: Prioritize: Inductive Automation recommends users upgrade to 8.1.54 or later (or the latest 8.3 version), which restricts project creation to Designer sessions and no longer relies on this setting.