security1 distinct publisher
Rockwell's ControlFLASH installer gave the Everyone group write access to its own program folder
CVE-2026-12663 covers every ControlFLASH build through V15.07, where any local account on an engineering workstation could stage code that runs with the privileges of the next engineer to open the firmware updater.
Publishers:cisa.gov
Reality
- Evidence66
- Adoption
- Insufficient
- Hype gap−8
- Incentives34