Rockwell Automation Patches Critical and High-Severity Industrial-Control Flaws
Vulnerability Disclosure · 6 sources · Updated 2mo ago · First seen Sep 1, 2026
Rockwell Automation released patches and mitigations for more than a dozen vulnerabilities affecting industrial-control hardware and software, including RSLinx Classic, CompactLogix and ControlLogix controllers, ArmorStart LT, FactoryTalk products, ControlFLASH, and the Redundancy Module Configuration Tool. Five flaws are rated high severity, while four critical/high-severity RSLinx Classic denial-of-service vulnerabilities can crash the service and require a restart; other issues could enable remote or arbitrary code execution, privilege escalation, cross-site scripting, and denial-of-service attacks.
The Canadian Centre for Cyber Security urged administrators to review Rockwell advisories SD1792, SD1794, SD1797, and SD1798 and apply available firmware and software updates. Organizations unable to patch should reduce exposure in line with vendor guidance. A ControlLogix/CompactLogix denial-of-service advisory header identifies CVE-2026-9637 as exploited, but the advisory body and CISA’s corresponding notice state that known exploitation has not been observed.
