cve 2026 9292

The cve 2026 9292 tag covers a stored cross-site scripting vulnerability in Rockwell Automation FactoryTalk DataMosaix Private Cloud 8.02 and earlier. The issue requires an authenticated, high-privilege user with access to Workflows configuration, but malicious script stored in affected content could run in the browsers of other users who later open it. Coverage focuses on the vendor’s stated remediation: upgrade FactoryTalk DataMosaix Private Cloud to version 8.03 or later. This tag provides a focused reference for the vulnerability, affected product versions, exploitation prerequisites, and the available upgrade guidance for administrators managing DataMosaix Private Cloud deployments.