Live 265 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network
CISA Advisories United States AI, Technology & Data Cyber security ✓ 22 claims checked 15 Oct 2026

CISA flags high-severity privilege-escalation flaw in Inductive Automation's Ignition platform

Regulus briefing
0:52 · CISA Advisories · 13 Oct 2026

CISA has published an ICS advisory on a CVSS 8.8 authorization flaw in Inductive Automation's Ignition software, used across critical manufacturing, energy and IT sectors worldwide. This segment covers what the vulnerability allows, which versions are affected, the fixed builds, and the defensive measures CISA sets out for operators running the platform on control-system networks.

  • CVE-2026-92817 allows an authenticated low-level user to escalate to Designer-level access and run arbitrary code on the Ignition Gateway.
  • Affected builds are Ignition 8.1.0-8.1.54 and 8.3.0-8.3.8; fixes shipped in 8.3.9 (August 2025) and 8.1.55 (September 2026).
  • CVSS v3.1 base score is 8.8 (HIGH); CISA reports no known public exploitation targeting the flaw at this time.

Executive summary

CISA released ICS advisory ICSA-26-286-01 on October 13, 2026, covering a single vulnerability in Inductive Automation's Ignition software. The flaw, tracked as CVE-2026-92817 and classified under CWE-863 (Incorrect Authorization), affects Ignition versions 8.1.0 through 8.1.54 and 8.3.0 through 8.3.8. According…

The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.

You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.

open to everyone: headline · overview · key takeaways · regulator · source document
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
See subscription options

Source documents

https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01
Published by CISA Advisories · 13 Oct 2026
Read by Regulus 15 Oct 2026 at 00:06 UTC
22 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.