CISA 2026-06-25

Horner Automation Cscape

CVE-2026-12897

Machine-generated analysis · WAYSCloud LLM

The vulnerability affects Cscape versions prior to 10.2 SP3 and is triggered by parsing malicious CSP files, potentially leading to information disclosure and arbitrary code execution.

Context

Horner Automation Cscape is engineering software used for programming and configuring industrial control systems. The advisory states that versions prior to 10.2 SP3 are vulnerable to an out-of-bounds read during CSP file parsing. Successful exploitation requires local access and user interaction, as noted in the CVSS v3 vector. The vendor has released version 10.2 SP3 to address this issue.

Operator considerations

Check: Inventory all instances of Horner Automation Cscape and verify the installed version.
Patch: Upgrade to Cscape 10.2 SP3 or later, as a vendor fix is available.
Log: Monitor for unexpected file access or execution events involving CSP files if logging is available.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow a local attacker to disclose information and execute arbitrary code.

The following versions of Horner Automation Cscape are affected:

Cscape

Read the full advisory on CISA →