CVE-2026-5387 — AVEVA Pipeline Simulation Missing Authorization
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) rol…
Published: 2026-04-15 · CVSS: 9.3 · CVSS 4.0
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) roles, resulting in privilege escalation with potential for modification of simulation parameters, training configuration, and training records.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7