Will CVE-2026-9292 (Rockwell FactoryTalk DataMosaix) be actively exploited by end of 2026?

CISA alerted on CVE-2026-9292 in Rockwell Automation FactoryTalk DataMosaix (≤v8.02) allowing an authenticated attacker to inject malicious scripts on the server, potentially compromising critical infrastructure environments. Resolution depends on documentation of exploitation-in-the-wild.

Resolution Criteria

YES if credible reports document active exploitation of CVE-2026-9292 in production environments by end of 2026, confirmed by CISA, vendor advisory, threat intel, or security researchers. NO if no documented exploitation by deadline.