# CVE-2026-8085: Rockwell Automation Arena Simulation out-of-bounds write in model.exe

Source: https://junglewise.ai/threats/cve-2026-8085-rockwell-automation-arena-simulation-out-of-bounds-write-in-model  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-8085 · Severity: info · CVSS 7.8 · Published 2026-07-14

Rockwell Automation Arena Simulation is a software tool used by businesses to model and optimize complex industrial systems. A security flaw in its modeling component allows an attacker to take control of a user's computer if the user is tricked into opening a specially crafted, malicious simulation file. This could lead to the theft of sensitive data, disruption of operations, or further infection of the corporate network.

Technologies: [Rockwell Automation Arena Simulation](https://junglewise.ai/threats/technologies/arena-simulation). Vendors: [Rockwell Automation](https://junglewise.ai/threats/vendors/rockwell-automation).

## Quick answers

**Is CVE-2026-8085 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8085 being exploited in the wild.

**How severe is CVE-2026-8085?** Informational severity, with a CVSS score of 7.8, published 14 July 2026.

**Which products and versions are affected?** Rockwell Automation Arena Simulation V17.00.00 and prior.

**Is there a fix for CVE-2026-8085?** A patch was published on 2026-07-14: Fixed in version V17.00.01 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-8085 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-8085?** Check whether you run Rockwell Automation Arena Simulation at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An out-of-bounds write vulnerability (CWE-787) exists in the model.exe (Siman) component of Rockwell Automation Arena Simulation. The issue is caused by improper validation of user-supplied data within simulation files. An attacker can exploit this by convincing a user to open a specially crafted file, leading to memory corruption and the execution of arbitrary code in the context of the current process. The vulnerability is addressed in version V17.00.01.

## Affected products

- Rockwell Automation Arena Simulation V17.00.00 and prior

## Timeline

- 2026-07-14: disclosed
- 2026-07-14: advisory
- 2026-07-14: patched: Fixed in version V17.00.01

## References

- [https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1784.html](https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1784.html)

## Related threats

- [Rockwell Automation Arena Simulation out-of-bounds write in siman.exe](https://junglewise.ai/threats/cve-2026-8314-rockwell-automation-arena-simulation-out-of-bounds-write-in-siman)
- [Rockwell Automation Arena Simulation out-of-bounds write in linker.exe](https://junglewise.ai/threats/cve-2026-8313-rockwell-automation-arena-simulation-out-of-bounds-write-in-linker)
- [Rockwell Automation Arena Simulation out-of-bounds write in expmt.exe](https://junglewise.ai/threats/cve-2026-8312-rockwell-automation-arena-simulation-out-of-bounds-write-in-expmt)