CVE-2025-9065 — Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit t…
Published: 2025-09-09 · CVSS: 8.6 · CVSS 4.0
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7