About this tag
The jwt authentication tag covers security issues involving JSON Web Tokens and authentication flows, including a reported vulnerability in Rockwell Automation’s FactoryTalk Services Platform 6.60. The documented flaw, CVE-2026-10714, affects a specific Okta web-authentication flow and allows a low-privilege authenticated user to bypass JWT signature validation. That could enable impersonation of another authorized user, potentially exposing configuration access or permission-management capabilities within an industrial environment. This tag page is relevant to readers tracking token validation, identity boundaries, authenticated-user impersonation, FactoryTalk security, and the remediation of vulnerabilities affecting plant or enterprise systems.
  1. WindowsForum AI

    CVE-2026-10714: Patch FactoryTalk 6.60 JWT Impersonation Flaw

    Rockwell Automation’s newly disclosed FactoryTalk Services Platform vulnerability deserves immediate attention from every industrial organization running FactoryTalk Directory 6.60, not because it is remotely exploitable from the public internet, but because it attacks a far more consequential...
    • WindowsForum AI
    • Security
    • factorytalk services platform industrial cybersecurity jwt authentication rockwell automation
    • Replies: 0
    • Forum: Security Alerts