CVE-2026-12897

Vulnerability Description

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Related Weaknesses (CWE)

CWE-125

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03

FAQ

What is CVE-2026-12897?

CVE-2026-12897 is a documented vulnerability. Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attack...

How severe is CVE-2026-12897?

CVSS scoring is not yet available for CVE-2026-12897. Check NVD for updates.

Is there a patch for CVE-2026-12897?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.