Quick answers
- Is CVE-2026-8085 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-8085 being exploited in the wild.
- How severe is CVE-2026-8085?
- Informational severity, with a CVSS score of 7.8, published 14 July 2026.
- Which products and versions are affected?
- Rockwell Automation Arena Simulation V17.00.00 and prior.
- Is there a fix for CVE-2026-8085?
- A patch was published on 2026-07-14: Fixed in version V17.00.01 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-8085 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2026-8085?
- Check whether you run Rockwell Automation Arena Simulation at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An out-of-bounds write vulnerability (CWE-787) exists in the model.exe (Siman) component of Rockwell Automation Arena Simulation. The issue is caused by improper validation of user-supplied data within simulation files. An attacker can exploit this by convincing a user to open a specially crafted file, leading to memory corruption and the execution of arbitrary code in the context of the current process. The vulnerability is addressed in version V17.00.01.
Affected products
- Rockwell Automation Arena Simulation V17.00.00 and prior
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory
- 2026-07-14: patched: Fixed in version V17.00.01