CVE-2026-12897

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Published: 6/25/2026Modified: 6/25/2026

Related Intelligence (1)

CRITICALPhishing

Horner Automation Cscape

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow a local attacker to disclose information and execute arbitrary code.</strong></p> <p>The following versions of Horner Automation Cscape are affected:</p> <ul> <li>Cscape <10.2_

CVE-2026-12897
CISA Advisories

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03