Advisories · Technology

Inductive Automation Ignition.

Every CVE that names Inductive Automation Ignition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92817 CVE record

CVSS 8.7 High

Inductive Automation Ignition Software Incorrect Authorization
- Inductive Automation Ignition
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-77393 CVE record

CVSS 8.7 High

Inductive Automation Ignition Incorrect Default Permissions
- Inductive Automation Ignition
- Broken access control
Not analysed yet 4 Sept 2026
CVE-2025-13911 CVE record

CVSS 7.3 High

Inductive Automation Ignition Execution with Unnecessary Privileges
- Inductive Automation Ignition
- Privilege escalation
Not analysed yet 18 Dec 2025
CVE-2023-50233 CVE record

CVSS 8.8 High

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Path traversal
Not analysed yet 3 May 2024
CVE-2023-50232 CVE record

CVSS 8.8 High

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Command injection
Not analysed yet 3 May 2024
CVE-2023-50223 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-50222 CVE record

CVSS 8.8 High

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-50221 CVE record

CVSS 8.8 High

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-50220 CVE record

CVSS 7.2 High

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-50219 CVE record

CVSS 8.8 High

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-50218 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-39477 CVE record

CVSS 7.5 High

Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- Inductive Automation Ignition
- Denial of service
Not analysed yet 3 May 2024
CVE-2023-39476 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-39475 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-39474 CVE record

CVSS 8.0 High

Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability
- Inductive Automation Ignition
- CWE-494
Not analysed yet 3 May 2024
CVE-2023-39473 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 3 May 2024
CVE-2023-39472 CVE record

CVSS 6.5 Medium

Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability
- Inductive Automation Ignition
- XML external entities (XXE)
Not analysed yet 3 May 2024
CVE-2023-38124 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability
- Inductive Automation Ignition
- CWE-749
Not analysed yet 3 May 2024
CVE-2023-38123 CVE record

CVSS 7.5 High

Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability
- Inductive Automation Ignition
- Authentication bypass
Not analysed yet 3 May 2024
CVE-2023-38122 CVE record

CVSS 7.2 High

Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability
- Inductive Automation Ignition
- CWE-942
Not analysed yet 3 May 2024
CVE-2023-38121 CVE record

CVSS 8.3 High

Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability
- Inductive Automation Ignition
- Cross-site scripting (XSS)
Not analysed yet 3 May 2024
CVE-2022-1704 CVE record

CVSS 7.6 High

Inductive Automation Ignition
- Inductive Automation Ignition
- XML external entities (XXE)
Not analysed yet 5 Aug 2022
CVE-2022-35873 CVE record

CVSS 7.8 High

Inductive Automation Ignition: This vulnerability allows remote attackers to execute arbitrary code on affected…
- Inductive Automation Ignition
- CWE-356
Not analysed yet 25 Jul 2022
CVE-2022-35872 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Inductive Automation Ignition
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 25 Jul 2022
CVE-2022-35871 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Missing authentication in Inductive Automation Ignition
- Inductive Automation Ignition
- Authentication bypass
Not analysed yet 25 Jul 2022
CVE-2022-35870 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Deserialization of untrusted data in Inductive Automation Ignition
- Inductive Automation Ignition
- Insecure deserialization
Not analysed yet 25 Jul 2022
CVE-2022-35869 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Authentication bypass in Inductive Automation Ignition
- Inductive Automation Ignition
- Authentication bypass
Not analysed yet 25 Jul 2022
CVE-2022-1264 CVE record

CVSS 6.8 Medium

Inductive Automation Ignition
- Inductive Automation Ignition
- Path traversal
Not analysed yet 20 Jul 2022