Memory Corruption Vulnerability in Arena® Simulation by Rockwell Automation

CVE-2026-8312

What is CVE-2026-8312?

A security issue within Arena® Simulation involves a memory corruption vulnerability linked to the expmt.exe (Siman) component. Due to insufficient validation of user-supplied input, this vulnerability allows for out-of-bounds write operations. If successfully exploited, an attacker could execute arbitrary code in the current process context by persuading a user to open a specially crafted malicious file.

References