CVE-2022-36126

7.2 highEPSS 2.7%

High (7.2) in inductiveautomation ignition. EPSS 2.7% chance of exploitation in the next 30 days.

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2022-07-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inductiveautomation:ignition

References

https://github.com/sourceincite/randy
https://srcincite.io/advisories/src-2022-0014/
https://support.inductiveautomation.com/hc/en-us/articles/7625759776653
https://github.com/sourceincite/randy
https://srcincite.io/advisories/src-2022-0014/

Check your stack JSON