CVE-2022-36126: Inductiveautomation Ignition

High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days.

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script.

Affected products

• Inductiveautomation Ignition: before 7.9.20 (fixed in 7.9.20); from 8.0.1, before 8.1.17 (fixed in 8.1.17)

Published 2022-07-16. Last modified 2026-06-17.