HIGH CWE-125
CVE-2026-12897
Out-of-bounds read in Horner Automation Cscape
Horner Automation·Cscape
8.4/ 10
CVSS 4.0
High severity
0.18%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 7% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 25, 2026
- Updated
- Jun 25, 2026
- First covered
- Jun 29, 2026
- Latest story
- 5 months ago
Summary
Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
CWE-125Out-of-bounds read
Attack profile
Attack vectorLocal
ComplexityLow
RequirementsNone
PrivilegesHigh
User interactionNone
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAffected products
- Horner Automation Cscapebefore 10.2 SP3