Rockwell Automation ThinManager

Expand All + CVE-2026-11917 A path traversal security issue exists within Rockwell Automation ThinManager software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system directories outside of the application's intended directory. View CVE Details Affected Products Rockwell Automation ThinManager Vendor:Rockwell Automation Product Version:Rockwell Automation ThinManager: >=13. 0. 0| =13.

1. 0| =13. 2. 0| =14. 0.

0| 13. 0. 8 Vendor fixThinManager Versions 13. 1. 0 - 13.

1. 5 --> 13. 1. 6 Vendor fixThinManager Versions 13. 2.

0 - 13. 2. 4 --> 13. 2. 5 Vendor fixThinManager Versions 14.

0. 0 - 14. 0. 2 --> 14. 0.

3 MitigationUsers using the affected software, who are not able to upgrade to one of the corrected versions, should use Rockwell Automation's security best practices. https://support. rockwellautomation. com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight MitigationFor more information, refer to Rockwell Automation's Securitry Advisory page. https://www.

rockwellautomation. com/en-us/trust-center/security-advisories. html Relevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Metrics CVSS Version Base Score Base Severity Vector String 3. 1 8. 1 HIGH CVSS:3.

1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 4. 0 7. 2 HIGH CVSS:4.