CVE-2025-13913Disclosure(inductiveautomation / ignition)

LOWCVSS 6.8 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch inductiveautomation ignition systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.

inductiveautomation CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-06

Other references

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ignition

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-04-15)
4 total mentions across 3 days

Affected systems

Vendors

inductiveautomation

Products

ignition

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1
2026-04-15	2	General1Patch1

Full discourse4 posts

Security Arsenal, LLC@SecurityAr58409178d
Patch
🔒 #CyberSecurity Urgent Action Required: Mitigating CVE-2025-13913 in Inductive Automation Ignit… "The Cybersecurity and Infrastructure Security Agency (CISA) recently released an…" 🔗 https://securityarsenal.com/blog/urgent-action-required-mitigating-cve-2025-13913-in-inductive-automation-ignition #CyberSecurity #ThreatIntel #alertfatigue #triage #alertmonitor
Post summary
The post announces an urgent mitigation for CVE‑2025‑13913 via a CISA advisory, but it does not provide PoC, exploit details, or technical specifics.
0000099
10 followersView on X
Security Arsenal, LLC@SecurityAr58409178d
General
🔒 #CyberSecurity CVE-2025-13913: Urgent Action Required for Ignition Software Users "Organizations relying on Inductive Automation's Ignition Software for industrial operations are…" 🔗 https://securityarsenal.com/blog/cve-2025-13913-urgent-action-required-for-ignition-software-users #CyberSecurity #ThreatIntel #alertfatigue #triage #alertmonitor
Post summary
The tweet merely announces CVE‑2025‑13913 and links to a blog post, providing no actionable or technical details.
00000103
10 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds211d
Disclosure
CVE-2025-13913 Unauthenticated API Vulnerability in Inductive Automation Ignition Software https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13913
Post summary
The text announces CVE‑2025‑13913 as an unauthenticated API vulnerability in Inductive Automation Ignition Software, directing readers to a Vulmon details page without additional technical or exploit information.
0000083
4.0K followersView on X
CVE@CVEnew212d
Disclosure
CVE-2025-13913 Inductive Automation Ignition Software is vulnerable to an unauthenticated API endpoint exposure that may allow an attacker to remotely change the "forgot password" r… https://www.cve.org/CVERecord?id=CVE-2025-13913
Post summary
The text announces CVE‑2025‑13913 as a vulnerability in Inductive Automation Ignition, detailing unauthenticated API exposure capable of changing password reset behavior.
00000169
56.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	inductiveautomation	ignition	-	-	-

Explore more

Back to dashboard inductiveautomation CVEs ignition vulnerabilities

What researchers are saying

CVE-2025-13913

Security Arsenal, LLC[verified]@SecurityAr58409Patch

The post announces an urgent mitigation for CVE‑2025‑13913 via a CISA advisory, but it does not provide PoC, exploit details, or technical specifics.

Security Arsenal, LLC[verified]@SecurityAr58409General

The tweet merely announces CVE‑2025‑13913 and links to a blog post, providing no actionable or technical details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE‑2025‑13913 as an unauthenticated API vulnerability in Inductive Automation Ignition Software, directing readers to a Vulmon details page without additional technical or exploit information.

CVE@CVEnewDisclosure

The text announces CVE‑2025‑13913 as a vulnerability in Inductive Automation Ignition, detailing unauthenticated API exposure capable of changing password reset behavior.