cvedb.io
CVE-2025-9161
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2025-09-09T13:15:32.830 · Last modified 2026-06-17T10:08:26.690

Summary

A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution.

Affected products

rockwellautomation — factorytalk_optix

Does this affect you?

Add your gear to cvedb and we'll alert you only when rockwellautomation ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.