A Blank Field Is Not a Permission List: Ignition's Default Gives Project Creation to Any Logged-In User
Ignition <= 8.1.53 ships its 'Create Project Role(s)' gateway setting empty — and in Ignition, empty means 'anyone.' CVE-2026-77393 (CVSS 8.8) is the five-minute config check your SCADA box has been waiting for.