CVE-2026-8085

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.

• CWE-787

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1784.htmlVendor Advisory

Published

Jul 14, 2026

Last Modified

Jul 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8079In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a …7.3
• CVE-2026-8080Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2026-8081A vulnerability has been found in router-for-me CLIProxyAPI …6.3
• CVE-2026-8082The bpost-shipping-platform WordPress plugin before 3.2.3 do…7.5
• CVE-2026-8083A vulnerability was found in SourceCodester Pharmacy Sales a…7.3
• CVE-2026-8084A vulnerability was determined in OSGeo gdal up to 3.13.0dev…5.5
• CVE-2026-8086A vulnerability was identified in OSGeo gdal up to 3.13.0dev…7.8
• CVE-2026-8087A security flaw has been discovered in OSGeo gdal up to 3.13…7.8
• CVE-2026-8088A weakness has been identified in OSGeo gdal up to 3.13.0dev…5.5
• CVE-2026-8089The weMail: Email Marketing, Email Automation, Newsletters, …7.1
• CVE-2026-8090Use-after-free in the DOM: Networking component. This vulner…7.3
• CVE-2026-8091Incorrect boundary conditions in the Audio/Video: Playback c…9.8