CVE-2026-12897

Description

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03