VULNERABILITY INTELLIGENCE
CVE-2026-12897
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-10-25
Description
Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-125