CVE-2025-9066: Rockwell Automation Factorytalk Viewpoint

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

Affected products

• Rockwell Automation Factorytalk Viewpoint: up to and including V14

Published 2025-10-14. Last modified 2026-10-08.