Out-of-Bounds Read Vulnerability in Productivity Suite by AutomationDirect
CVE-2026-57896

6.9MEDIUM

Key Information:

Vendor

Automationdirect

Status
Productivity Suite
Vendor
CVE Published:
16 July 2026

What is CVE-2026-57896?

An out-of-bounds read vulnerability has been identified within AutomationDirect's Productivity Suite. This vulnerability could potentially allow a local attacker to engage in kernel memory corruption by sending a specially crafted IOCTL request to the affected system. The implications of this vulnerability are significant, including potential limited information disclosure and disruption of normal operations within the affected applications.

Affected Version(s)

Productivity Suite 0

Productivity Suite v4.7.0.47

References

https://www.automationdirect.com/support/software-downloads
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks reported this vulnerability to CISA.
.