{"vulnerability": "CVE-2026-92817", "sightings": [{"uuid": "7984fd23-75dd-469e-a98f-a84502bdd9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jox5bhjowy5zs", "content": "CVE-2026-92817 - Inductive Automation Ignition Software Incorrect Authorization\nCVE ID : CVE-2026-92817\n \n Published : Oct. 13, 2026, 11:22 p.m. | 10\u00a0minutes ago\n \n Description : The Ignition Perspective module does not properly validate session privileges when determining Des...", "creation_timestamp": "2026-10-14T00:01:14.406747Z"}, {"uuid": "ccd79ca6-2048-4212-854a-42d7159898c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92817", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxsnxcfjbm23", "content": "~Cisa~\nAuthenticated users can gain Designer privileges and execute code; update to 8.1.55 or 8.3.9.\n-\nIOCs: CVE-2026-92817\n-\n#CVE-2026-92817 #ICS #ThreatIntel", "creation_timestamp": "2026-10-14T04:01:00.000125Z"}, {"uuid": "23f22d3b-e9bd-4fb3-bd44-c6d8c19cc66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92817", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxt4echvrc2u", "content": "Three platforms, one flaw: authenticated non-admin users escalating to full admin. Ignition CVE-2026-92817 to 8.1.55/8.3.9, Lowcoder CVE-2026-16753, MarkLogic to 11.3.7/12.1.0. Patch all three. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-14T08:18:47.791920Z"}, {"uuid": "dd07ea4a-5dd7-4d01-96c2-b759299c0d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92817", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117440140137349363", "content": "CVE-2026-92817 Inductive Automation Ignition Software Incorrect Authorization The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated privileges to execute arbitrary code in the context of the Ignition Gateway process.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92817https://security.inductiveautomation.com/?tcuUid=34477620-731d-4b70-b22b-9450f9a659a3https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-286-01.json#InductiveAutomation #Ignition#CVE_2026_92817#bot", "creation_timestamp": "2026-10-14T16:12:07.548639Z"}]}