CVE-2026-77393
CVE-2026-77393
In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3 series is not affected.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-77393?
- CVE-2026-77393 is a high-severity vulnerability, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2026-09-04.
- How severe is CVE-2026-77393?
- High severity. CVSS v3 base score is 8.8 out of 10.