Is CVE-2026-77393 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-77393?

CVE-2026-77393 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-77393

Description

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3 series is not affected.