Horner Automation vulnerabilities
Published CVEs affecting Horner Automation products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-12897
High · 8.4
CWE-125 Jun 25, 2026
Out-of-bounds read in Horner Automation Cscape
Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
CVE-2026-6284
Critical · 9.1
CWE-521 Apr 17, 2026
Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.