Quick answers
- Is CVE-2026-8314 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-8314 being exploited in the wild.
- How severe is CVE-2026-8314?
- Informational severity, with a CVSS score of 7.8, published 14 July 2026.
- Which products and versions are affected?
- Rockwell Automation Arena Simulation V17.00.00 and prior.
- Is there a fix for CVE-2026-8314?
- A patch was published on 2026-07-14. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-8314 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2026-8314?
- Check whether you run Rockwell Automation Arena Simulation at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An out-of-bounds write vulnerability (CWE-787) exists in the siman.exe (Siman) component of Rockwell Automation Arena Simulation. The issue is caused by improper validation of user-supplied data when parsing files. An attacker can exploit this by convincing a user to open a maliciously crafted file, leading to memory corruption and arbitrary code execution in the context of the current process. The vulnerability affects versions V17.00.00 and prior, and has been addressed in version V17.00.01.
Affected products
- Rockwell Automation Arena Simulation V17.00.00 and prior
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory
- 2026-07-14: patched