CVE-2026-8085Disclosure(rockwellautomation / arena)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch rockwellautomation arena systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

rockwellautomation CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1784.html

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

arena

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
Disclosure: 3 classified signals
Peaked 4d ago at 1 mentions (2026-07-15); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

rockwellautomation

Products

arena

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

Disclosure

360.0%

Patch

240.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	1	Disclosure1
2026-07-16	1	Patch1
2026-07-21	1	Disclosure1
2026-07-25	1	Disclosure1
2026-07-26	1	Patch1

Full discourse5 posts

TECHEPAGES@techepages81d
Patch
Rockwell Automation has disclosed four memory corruption vulnerabilities (CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, CVE-2026-8314) in Arena Simulation affecting versions V17.00.00 and earlier. Organizations using Arena in OT or engineering environments should upgrade to V17.00.01, restrict model files from untrusted sources, and enforce application allowlisting on affected workstations.
Post summary
Rockwell Automation disclosed four memory‑corruption bugs in Arena Simulation and advised users to upgrade to V17.00.01 and enforce additional controls to mitigate potential exploitation.
0000045
33 followersView on X
SecNews@SecNews_GR82d
Disclosure
Rockwell Arena Simulation: 4 ευπάθειες memory corruption οδηγούν σε εκτέλεση κώδικα (CVE-2026-8085/8312/8313/8314) – update https://secn.ws/x9zDvG
Post summary
The post announces four new memory‑corruption vulnerabilities (CVE‑2026‑8085/8312/8313/8314) in Rockwell Arena Simulation that can lead to arbitrary code execution.
00000120
7.0K followersView on X
BREACHSPIDER@breachspider86d
Disclosure
[Threat Brief] Rockwell Automation Arena Memory Corruption Flaws (CVE-2026-8085, 8312, 8313, 8314) Enable Arbitrary Code Execution https://breachspider.com/intel/2026-07-21-rockwell-automation-arena-memory-corruption-flaws-cve-2026-8 #ICS #OTSecurity #SCADA #CriticalInfrastructure
Post summary
The threat brief announces memory corruption flaws in Rockwell Automation that allow arbitrary code execution, but it does not provide a PoC, exploit tool, active exploitation evidence, or patch information.
0000047
2.3K followersView on X
Windows Forum@windowsforum90d
Patch
🪟 Rockwell Arena users: V17.00.00 can turn a malicious file into arbitrary code execution. Update to V17.00.01—because “just opening a file” shouldn’t launch an attacker’s career. https://windowsforum.com/threads/cve-2026-8085-update-rockwell-arena-to-v17-00-01.438953/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RockwellAutomation #CveVulnerabilities #ArenaSoftware https://t.co/BpjG07aWw8
Post summary
The post alerts users that Rockwell Arena v17.00.00 is susceptible to arbitrary code execution via malicious files and urges an upgrade to v17.00.01 to remediate the flaw.
0000011
1.3K followersView on X
DailyCVE@dailycve91d
Disclosure
🔴 Rockwell Automation Arena Simulation, Memory Corruption (Out-of-Bounds Write), #CVE-2026-8085 (High) -DC-Jul2026-1015 https://dailycve.com/rockwell-automation-arena-simulation-memory-corruption-out-of-bounds-write-cve-2026-8085-high-dc-jul2026-1015/
Post summary
The post announces the discovery of CVE‑2026‑8085, a high‑severity memory corruption flaw in Rockwell Automation’s Arena Simulation, without indicating an existing PoC, exploit, or patch.
0000064
219 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	rockwellautomation	arena	-	-	-

Explore more

Back to dashboard rockwellautomation CVEs arena vulnerabilities

What researchers are saying

CVE-2026-8085

TECHEPAGES[verified]@techepagesPatch

Rockwell Automation disclosed four memory‑corruption bugs in Arena Simulation and advised users to upgrade to V17.00.01 and enforce additional controls to mitigate potential exploitation.

SecNews[verified]@SecNews_GRDisclosure

The post announces four new memory‑corruption vulnerabilities (CVE‑2026‑8085/8312/8313/8314) in Rockwell Arena Simulation that can lead to arbitrary code execution.

Windows Forum[verified]@windowsforumPatch

The post alerts users that Rockwell Arena v17.00.00 is susceptible to arbitrary code execution via malicious files and urges an upgrade to v17.00.01 to remediate the flaw.

BREACHSPIDER@breachspiderDisclosure

The threat brief announces memory corruption flaws in Rockwell Automation that allow arbitrary code execution, but it does not provide a PoC, exploit tool, active exploitation evidence, or patch information.

DailyCVE@dailycveDisclosure

The post announces the discovery of CVE‑2026‑8085, a high‑severity memory corruption flaw in Rockwell Automation’s Arena Simulation, without indicating an existing PoC, exploit, or patch.