Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address CVE-2026-92817. Users are strongly recommended to update to the newest available version. CISA recommends minimizing network exposure for control system devices, ensuring they are not internet-accessible, and locating control system networks behind firewalls isolated from business networks. When remote access is required, use VPNs updated to the most current version. No known public exploitation has been reported to CISA at the time of the advisory.
Quick answers
What is CVE-2026-92817?
Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address CVE-2026-92817. Users are strongly recommended to update to the newest available version. CISA recommends minimizing network exposure for control system devices, ensuring they are not internet-accessible, and locating control system networks behind firewalls isolated from business networks. When remote access is required, use VPNs updated to the most current version. No known public exploitation has been reported to CISA at the time of the advisory.
How severe is CVE-2026-92817?
high, CVSS 8.8
Is CVE-2026-92817 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-92817 be mitigated?
Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address CVE-2026-92817. Users are strongly recommended to update to the newest available version. CISA recommends minimizing network exposure for control system devices, ensuring they are not internet-accessible, and locating control system networks behind firewalls isolated from business networks. When remote access is required, use VPNs updated to the most current version. No known public exploitation has been reported to CISA at the time of the advisory.
Inductive Automation released version 8.3.9 in August 2025 and version 8.1.55 in September 2026 to address CVE-2026-92817. Users are strongly recommended to update to the newest available version. CISA recommends minimizing network exposure for control system devices, ensuring they are not internet-accessible, and locating control system networks behind firewalls isolated from business networks. When remote access is required, use VPNs updated to the most current version. No known public exploitation has been reported to CISA at the time of the advisory.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an Industrial Control Systems advisory regarding a privilege escalation vulnerability in Inductive Automation Ignition software. Successful exploitation could allow an authenticated low-level user to escalate privileges to Designer level and execute arbitrary code within the Ignition Gateway process. Inductive Automation has released patches in versions 8.3.9 and 8.1.55 to address the flaw. CISA notes no known public exploitation at the time of the advisory.