High severityNVD Advisory· Published Oct 14, 2025· Updated Apr 15, 2026

CVE-2025-9066

Description

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

Affected products

Rockwellautomation/FactoryTalk® ViewPointllm-create

Patches

Vulnerability mechanics

References

www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1752htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000