CISA 2026-07-16

Rockwell Automation Arena

Machine-generated analysis · WAYSCloud LLM

Arena versions up to V17.00.00 are vulnerable to out-of-bounds write flaws that could allow arbitrary code execution.

Context

Rockwell Automation Arena is a simulation software product from Rockwell Automation. The advisory reports four CVEs (CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, CVE-2026-8314) involving out-of-bounds write memory corruption in components such as model.exe and expmt.exe, which could enable an attacker to execute arbitrary code in the context of the current process. The vulnerabilities can be triggered by convincing a user to open a malicious file. Rockwell Automation recommends updating to version V17.00.01.

Operator considerations

Check: Identify Arena installations running version V17.00.00 or earlier.
Patch: Apply the update to V17.00.01 as recommended by Rockwell Automation.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation these vulnerabilities could allow an attacker to execute arbitrary code in the context of the current process.

The following versions of Rockwell Automation Arena are affected:

Arena

Read the full advisory on CISA →