CVE-2026-6071Code Execution Vulnerability in Arena® Exploitation status Not known exploited Fix Not confirmed Affected product A Arena Published 09/03/2026 Severity High CVE-2024-7956Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud Exploitation status Not known exploited Fix Not confirmed Affected product D DataMosaix™ Private Cloud Published 09/02/2026 Severity High CVE-2024-7953DataEdgePlatform DataMosaix™ Private Cloud Exploitation status Not known exploited Fix Not confirmed Affected product D DataEdgePlatform DataMosaix™ Private Cloud Published 09/01/2026 Severity High CVE-2024-7952DataEdgePlatform DataMosaix™ Private Cloud Exploitation status Not known exploited Fix Not confirmed Affected product D DataEdgePlatform DataMosaix™ Private Cloud Published 09/01/2026 Severity High CVE-2026-9634Redundancy Module Configuration Tool - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R Redundancy Module Configuration Tool Published 09/01/2026 Severity High CVE-2026-9633Redundancy Module Configuration Tool - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R Redundancy Module Configuration Tool Published 09/01/2026 Severity High CVE-2026-12661FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk® Historian Machine Edition Published 09/01/2026 Severity Medium CVE-2025-12768FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk® Historian Machine Edition Published 09/01/2026 Severity High CVE-2026-9625RSLinx Classic® - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R RSLinx Classic® Published 09/01/2026 Severity High CVE-2026-9624RSLinx Classic® - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R RSLinx Classic® Published 09/01/2026 Severity High CVE-2026-9622RSLinx Classic® - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R RSLinx Classic® Published 09/01/2026 Severity High CVE-2026-9621RSLinx Classic® - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product R RSLinx Classic® Published 09/01/2026 Severity Critical CVE-2026-12663ControlFLASH ® – Improper Access Control Exploitation status Not known exploited Fix Not confirmed Affected product C ControlFLASH ® Published 09/01/2026 Severity High CVE-2026-9637CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product C CompactLogix® 5380 / ControlLogix® 5580 Published 09/01/2026 Severity High CVE-2026-16675Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation Exploitation status Not known exploited Fix Affected product F FactoryTalk Activation Manager Published 09/01/2026 Severity High CVE-2026-84235Rockwell Automation 1756-ENBT Denial of Service Vulnerability Exploitation status Not known exploited Fix Affected product 1 1756-ENBT Module Published 09/01/2026 Severity High CVE-2026-19472Rockwell Automation ArmorStart® LT Denial Of Service Exploitation status Not known exploited Fix Affected product A ArmorStart® LT Published 09/01/2026 Severity High CVE-2026-19471Rockwell Automation ArmorStart® LT Stored Cross-site scripting Exploitation status Not known exploited Fix Affected product A ArmorStart® LT Published 09/01/2026 Severity Medium CVE-2026-75112OTTO® Fleet Manager – Weak Password Hashing Configuration Exploitation status Not known exploited Fix Not confirmed Affected product O OTTO® Fleet Manager Published 08/19/2026 Severity Medium CVE-2026-12659Rockwell Automation Flex 5000® Adapter - Denial of Service Exploitation status Not known exploited Fix Affected product T The FLEX 5000® EtherNet/IP Adapter Published 07/14/2026 Severity High CVE-2026-9128Studio 5000 Logix Designer® – Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product S Studio 5000 Logix Designer® Published 07/14/2026 Severity High CVE-2026-9636Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability Exploitation status Not known exploited Fix Affected product C ControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5380, 1756-EN4TR Published 07/14/2026 Severity High CVE-2026-9127Studio 5000 Logix Designer® – Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product S Studio 5000 Logix Designer® Published 07/14/2026 Severity High CVE-2026-9108Studio 5000 Logix Designer® – Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product S Studio 5000 Logix Designer® Published 07/14/2026 Severity Medium CVE-2026-11917ThinManager® - Path Traversal via API Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk ThinManager Published 07/14/2026 Severity High CVE-2026-9292Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product F FactoryTalk® DataMosaix™ Private Cloud Published 07/14/2026 Severity High CVE-2025-11698CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow Exploitation status Not known exploited Fix Not confirmed Affected product C CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image Published 07/14/2026 Severity Critical CVE-2025-12012CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow Exploitation status Not known exploited Fix Not confirmed Affected product C CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 Published 07/14/2026 Severity Critical CVE-2025-12011CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow Exploitation status Not known exploited Fix Not confirmed Affected product C CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570 Published 07/14/2026 Severity Critical CVE-2026-10714Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass Exploitation status Not known exploited Fix Affected product F FactoryTalk® Services Platform Published 07/14/2026 Severity High CVE-2026-96531756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID Exploitation status Not known exploited Fix Not confirmed Affected product 1 1756-EN2, 1756-EN3 Published 07/14/2026 Severity High CVE-2026-105731734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object Exploitation status Not known exploited Fix Not confirmed Affected product 1 1734 POINT I/O Published 07/14/2026 Severity Medium CVE-2026-91401718-AENTR/1719-AENTR - Denial of Service Exploitation status Not known exploited Fix Not confirmed Affected product 1 1718-AENTR/1719-AENTR Published 07/14/2026 Severity High CVE-2026-8314Rockwell Automation Arena® - Memory Corruption Vulnerability Exploitation status Not known exploited Fix Affected product A Arena® Simulation Published 07/14/2026 Severity High CVE-2026-8313Rockwell Automation Arena® - Memory Corruption Vulnerability Exploitation status Not known exploited Fix Affected product A Arena® Simulation Published 07/14/2026 Severity High CVE-2026-8085Rockwell Automation Arena® - Memory Corruption Vulnerability Exploitation status Not known exploited Fix Affected product A Arena® Simulation Published 07/14/2026 Severity High CVE-2026-0647Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product F FLEX I/O EtherNet/IP Adapters Published 06/16/2026 Severity High CVE-2026-0646Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product F FLEX I/O EtherNet/IP Adapters Published 06/16/2026 Severity High CVE-2025-14272Rockwell Automation FactoryTalk Analytics PavilionX Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk Analytics PavilionX Published 06/16/2026 Severity High CVE-2025-13036Rockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass Exploitation status Not known exploited Fix Affected product F FactoryTalk Historian SE Published 06/16/2026 Severity Critical CVE-2026-9307Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities Exploitation status Not known exploited Fix Affected product C CompactLogix® 5370 Published 06/16/2026 Severity Medium CVE-2025-11694Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities Exploitation status Not known exploited Fix Affected product C CompactLogix® 5370 Published 06/16/2026 Severity High CVE-2026-11317Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP Exploitation status Not known exploited Fix Affected product C CompactLogix, ControlLogix Published 06/16/2026 Severity High CVE-2025-9283ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9282ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9281ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9280ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-14027Rockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XT Exploitation status Not known exploited Fix Affected product C ControlLogix® Redundancy Enhanced Module Published 01/20/2026 Severity High CVE-2025-9279ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9278ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9466ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-11743Rockwell Automation CompactLogix® 5370 Denial of Service Vulnerability Exploitation status Not known exploited Fix Affected product C CompactLogix® 5370 Published 01/20/2026 Severity High CVE-2025-9465ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-9464Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Exploitation status Not known exploited Fix Not confirmed Affected product A ArmorStart® LT Published 01/20/2026 Severity High CVE-2025-14377Verve Asset Manager – Plaintext Storage Vulnerabilities Exploitation status Not known exploited Fix Affected product V Verve Asset Manager Published 01/20/2026 Severity High CVE-2025-14376Verve Asset Manager – Plaintext Storage Vulnerabilities Exploitation status Not known exploited Fix Affected product V Verve Asset Manager Published 01/20/2026 Severity High CVE-2025-13824Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities Exploitation status Not known exploited Fix Affected product M Micro820®, Micro850®, Micro870® Published 12/15/2025 Severity High CVE-2025-13823Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities Exploitation status Not known exploited Fix Affected product M Micro820®, Micro850®, Micro870® Published 12/15/2025 Severity High CVE-2025-9368432ES-IG3 Series A Denial-of-Service Vulnerability Exploitation status Not known exploited Fix Affected product 4 432ES-IG3 Series A Published 12/09/2025 Severity High CVE-2025-12807FactoryTalk® DataMosaix™ Private Cloud SQL Injection Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk® DataMosaix™ Private Cloud Published 12/09/2025 Severity High CVE-2025-11918Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability Exploitation status Not known exploited Fix Affected product A Arena® Simulation Published 11/14/2025 Severity High CVE-2025-11697Studio 5000 ® Simulation Interface Local Code Execution Exploitation status Not known exploited Fix Affected product S Studio 5000 ® Simulation Interface Published 11/11/2025 Severity High CVE-2025-11696Studio 5000 ® Simulation Interface SSRF Exploitation status Not known exploited Fix Affected product S Studio 5000® Simulation Interface™ Published 11/11/2025 Severity High CVE-2025-11862Verve Asset Manager Access Control Vulnerability Exploitation status Not known exploited Fix Affected product V Verve Asset Manager Published 11/11/2025 Severity High CVE-2025-11085FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS Exploitation status Not known exploited Fix Affected product F FactoryTalk® DataMosaix™ Private Cloud Published 11/11/2025 Severity High CVE-2025-11084FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass Exploitation status Not known exploited Fix Affected product F FactoryTalk® DataMosaix™ Private Cloud Published 11/11/2025 Severity High CVE-2025-9178Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability Exploitation status Not known exploited Fix Affected product 1 1715-AENTR EtherNet/IP Adapter Published 10/14/2025 Severity High CVE-2025-9177Rockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability Exploitation status Not known exploited Fix Affected product 1 1715-AENTR EtherNet/IP Adapter Published 10/14/2025 Severity High CVE-2025-7330Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability Exploitation status Not known exploited Fix Affected product C Comms - 1783-NATR Published 10/14/2025 Severity High CVE-2025-7329Rockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product C Comms - 1783-NATR Published 10/14/2025 Severity High CVE-2025-7328Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication Vulnerabilities Exploitation status Not known exploited Fix Affected product C Comms - 1783-NATR Published 10/14/2025 Severity Critical CVE-2025-9067Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities Exploitation status Not known exploited Fix Affected product F FactoryTalk® Linx Published 10/14/2025 Severity High CVE-2025-9124Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability Exploitation status Not known exploited Fix Affected product C Compact GuardLogix® 5370 Published 10/14/2025 Severity High CVE-2025-9068Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities Exploitation status Not known exploited Fix Affected product F FactoryTalk® Linx Published 10/14/2025 Severity High CVE-2025-9064Rockwell Automation FactoryTalk View Machine Edition Path Traversal Exploitation status Not known exploited Fix Affected product F FactoryTalk View Machine Edition Published 10/14/2025 Severity High CVE-2025-9063Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass Exploitation status Not known exploited Fix Affected product P PanelView Plus 7 Performance Series B Published 10/14/2025 Severity High CVE-2025-9066Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability Exploitation status Not known exploited Fix Affected product F FactoryTalk® ViewPoint Published 10/14/2025 Severity High CVE-2025-9437Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability Exploitation status Not known exploited Fix Affected product A ArmorStart AOP Published 10/14/2025 Severity High CVE-2025-9161Rockwell Automation FactoryTalk Optix Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk Optix Published 09/09/2025 Severity High CVE-2025-7350Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S Stratix IOS Published 09/09/2025 Severity High CVE-2025-9065Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product T ThinManager Published 09/09/2025 Severity High CVE-2025-7970Rockwell Automation FactoryTalk Activation Manager Lack of Encryption Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product F FactoryTalk Activation Manager Published 09/09/2025 Severity High CVE-2025-9364Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB Exploitation status Not known exploited Fix Affected product F FactoryTalk® Analytics™ LogixAI® Published 09/09/2025 Severity High CVE-2025-9166Rockwell Automation ControlLogix® 5580 V35.013 Denial-Of-Service Exploitation status Not known exploited Fix Affected product C ControlLogix 5580 Published 09/09/2025 Severity High CVE-2025-9160Rockwell Automation CompactLogix® 5480 Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product C CompactLogix 5480 Published 09/09/2025 Severity High CVE-2025-8007Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability Exploitation status Not known exploited Fix Affected product 1 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT Published 09/09/2025 Severity High CVE-2025-8008Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability Exploitation status Not known exploited Fix Affected product 1 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT Published 09/09/2025 Severity High CVE-2025-7693Rockwell Automation Micro800 Vulnerability Exploitation status Not known exploited Fix Affected product P PLC - Micro850 L50E Published 08/18/2025 Severity Critical CVE-2025-7971Studio 5000 Logix Designer® – Arbitrary Code Execution Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S Studio 5000 Logix Designer® Published 08/14/2025 Severity High CVE-2025-7972Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability Exploitation status Not known exploited Fix Affected product F FactoryTalk® Linx Published 08/14/2025 Severity High CVE-2025-9042Rockwell Automation FLEX 5000 I/O - Module Fault Exploitation status Not known exploited Fix Affected product F FLEX 5000 I/O Published 08/14/2025 Severity High CVE-2025-9041Rockwell Automation FLEX 5000 I/O - Module Fault Exploitation status Not known exploited Fix Affected product F FLEX 5000 I/O Published 08/14/2025 Severity High CVE-2025-7973Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product F FactoryTalk® ViewPoint Published 08/14/2025 Severity High CVE-2025-7773Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities Exploitation status Not known exploited Fix Affected product 5 5032-CFGB16M12P5DR Published 08/14/2025 Severity High CVE-2025-7774Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities Exploitation status Not known exploited Fix Affected product 5 5032-CFGB16M12P5DR Published 08/14/2025 Severity High CVE-2025-9036Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime Vulnerability Exploitation status Not known exploited Fix Affected product F FactoryTalk® Action Manager Published 08/14/2025 Severity High CVE-2025-7353Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product 1 1756-EN2T/D Published 08/14/2025 Severity Critical CVE-2025-7033Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation Exploitation status Not known exploited Fix Not confirmed Affected product A Arena® Simulation Published 08/05/2025 Severity High CVE-2025-7032Rockwell Automation Stack-based Buffer Overflow In Arena® Simulation Exploitation status Not known exploited Fix Not confirmed Affected product A Arena® Simulation Published 08/05/2025 Severity High CVE-2025-7025Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation Exploitation status Not known exploited Fix Not confirmed Affected product A Arena® Simulation Published 08/05/2025 Severity High 
