{"schema_version":1,"title":"Rockwell Automation vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 46 vulnerabilities in Rockwell Automation: 0 in the last 7 days and 36 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2024-7956, was published on 2 September 2026. 7 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/rockwell-automation","json_url":"https://junglewise.ai/threats/vendors/rockwell-automation.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/rockwell-automation","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":0,"all_time":46,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":17,"last_90_days":36,"last_365_days":46},"latest":[{"cve":"CVE-2024-7956","cvss":8.1,"epss":0.0027,"slug":"cve-2024-7956-rockwell-automation-datamosaix-private-cloud-incorrect","title":"Rockwell Automation DataMosaix Private Cloud incorrect authorization","severity":"info","exploited":false,"published_at":"2026-09-02T15:17:36.107+00:00","url":"https://junglewise.ai/threats/cve-2024-7956-rockwell-automation-datamosaix-private-cloud-incorrect"},{"cve":"CVE-2024-7953","cvss":8.8,"epss":0.0024,"slug":"cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation","title":"Rockwell Automation DataMosaix Private Cloud privilege escalation","severity":"info","exploited":false,"published_at":"2026-09-01T18:17:38.887+00:00","url":"https://junglewise.ai/threats/cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation"},{"cve":"CVE-2024-7952","cvss":7.5,"epss":0.0041,"slug":"cve-2024-7952-rockwell-automation-datamosaix-private-cloud-sensitive-data","title":"Rockwell Automation DataMosaix Private Cloud sensitive data exposure","severity":"info","exploited":false,"published_at":"2026-09-01T18:17:38.11+00:00","url":"https://junglewise.ai/threats/cve-2024-7952-rockwell-automation-datamosaix-private-cloud-sensitive-data"},{"cve":"CVE-2026-9637","cvss":8.7,"epss":0.0043,"slug":"cve-2026-9637-rockwell-automation-logix-platform-denial-of-service-in-cip","title":"Rockwell Automation Logix Platform denial-of-service in CIP message processing","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:50.157+00:00","url":"https://junglewise.ai/threats/cve-2026-9637-rockwell-automation-logix-platform-denial-of-service-in-cip"},{"cve":"CVE-2026-9634","cvss":7.3,"epss":0.0013,"slug":"cve-2026-9634-rockwell-automation-redundancy-module-configuration-tool-dll","title":"Rockwell Automation Redundancy Module Configuration Tool DLL search path privilege escalation","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:50.017+00:00","url":"https://junglewise.ai/threats/cve-2026-9634-rockwell-automation-redundancy-module-configuration-tool-dll"},{"cve":"CVE-2026-9633","cvss":7.3,"epss":0.0013,"slug":"cve-2026-9633-rockwell-automation-redundancy-module-configuration-tool-dll","title":"Rockwell Automation Redundancy Module Configuration Tool DLL hijacking","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.893+00:00","url":"https://junglewise.ai/threats/cve-2026-9633-rockwell-automation-redundancy-module-configuration-tool-dll"},{"cve":"CVE-2026-9625","cvss":8.7,"epss":0.0043,"slug":"cve-2026-9625-rockwell-automation-rslinx-classic-denial-of-service-in-cip-packet","title":"Rockwell Automation RSLinx Classic denial-of-service in CIP packet handling","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.767+00:00","url":"https://junglewise.ai/threats/cve-2026-9625-rockwell-automation-rslinx-classic-denial-of-service-in-cip-packet"},{"cve":"CVE-2026-9624","cvss":8.7,"epss":0.0043,"slug":"cve-2026-9624-rockwell-automation-rslinx-classic-denial-of-service-via-malformed","title":"Rockwell Automation RSLinx Classic denial-of-service via malformed CIP packet","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.633+00:00","url":"https://junglewise.ai/threats/cve-2026-9624-rockwell-automation-rslinx-classic-denial-of-service-via-malformed"},{"cve":"CVE-2026-9622","cvss":9.2,"epss":0.0043,"slug":"cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward","title":"Rockwell Automation RSLinx Classic denial-of-service in Forward Close service","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.51+00:00","url":"https://junglewise.ai/threats/cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward"},{"cve":"CVE-2026-9621","cvss":8.6,"epss":0.0043,"slug":"cve-2026-9621-rockwell-automation-rslinx-classic-denial-of-service-via-malformed","title":"Rockwell Automation RSLinx Classic denial-of-service via malformed CIP packet","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.377+00:00","url":"https://junglewise.ai/threats/cve-2026-9621-rockwell-automation-rslinx-classic-denial-of-service-via-malformed"},{"cve":"CVE-2026-16675","cvss":8.5,"epss":0.0012,"slug":"cve-2026-16675-rockwell-automation-factorytalk-activation-manager-privilege","title":"Rockwell Automation FactoryTalk Activation Manager privilege escalation in installer","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:25.437+00:00","url":"https://junglewise.ai/threats/cve-2026-16675-rockwell-automation-factorytalk-activation-manager-privilege"},{"cve":"CVE-2026-12663","cvss":7.3,"epss":0.0012,"slug":"cve-2026-12663-rockwell-automation-controlflash-improper-access-control-in","title":"Rockwell Automation ControlFLASH improper access control in installer","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:24.29+00:00","url":"https://junglewise.ai/threats/cve-2026-12663-rockwell-automation-controlflash-improper-access-control-in"},{"cve":"CVE-2026-12661","cvss":4.5,"epss":0.0016,"slug":"cve-2026-12661-rockwell-automation-factorytalk-historian-machine-edition-stack","title":"Rockwell Automation FactoryTalk Historian Machine Edition stack-based buffer overflow","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:24.133+00:00","url":"https://junglewise.ai/threats/cve-2026-12661-rockwell-automation-factorytalk-historian-machine-edition-stack"},{"cve":"CVE-2025-12768","cvss":8,"epss":0.0031,"slug":"cve-2025-12768-rockwell-automation-factorytalk-historian-machine-edition-out-of","title":"Rockwell Automation FactoryTalk Historian Machine Edition out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:23.98+00:00","url":"https://junglewise.ai/threats/cve-2025-12768-rockwell-automation-factorytalk-historian-machine-edition-out-of"},{"cve":"CVE-2026-84235","cvss":8.7,"epss":0.0043,"slug":"cve-2026-84235-rockwell-automation-1756-enbt-denial-of-service-in-cip-packet","title":"Rockwell Automation 1756-ENBT denial of service in CIP packet handling","severity":"info","exploited":false,"published_at":"2026-09-01T13:20:09.563+00:00","url":"https://junglewise.ai/threats/cve-2026-84235-rockwell-automation-1756-enbt-denial-of-service-in-cip-packet"},{"cve":"CVE-2026-19472","cvss":7.5,"epss":0.0032,"slug":"cve-2026-19472-rockwell-automation-armorstart-lt-denial-of-service-in-http-put","title":"Rockwell Automation ArmorStart LT denial of service in HTTP PUT handler","severity":"info","exploited":false,"published_at":"2026-09-01T13:18:12.857+00:00","url":"https://junglewise.ai/threats/cve-2026-19472-rockwell-automation-armorstart-lt-denial-of-service-in-http-put"},{"cve":"CVE-2026-19471","cvss":7.3,"epss":0.0028,"slug":"cve-2026-19471-rockwell-automation-armorstart-lt-stored-cross-site-scripting","title":"Rockwell Automation ArmorStart LT stored cross-site scripting","severity":"info","exploited":false,"published_at":"2026-09-01T13:18:12.707+00:00","url":"https://junglewise.ai/threats/cve-2026-19471-rockwell-automation-armorstart-lt-stored-cross-site-scripting"},{"cve":"CVE-2026-9636","cvss":8.2,"slug":"cve-2026-9636-rockwell-automation-logix-controllers-improper-certificate","title":"Rockwell Automation Logix Controllers improper certificate revocation check","severity":"info","exploited":false,"published_at":"2026-07-14T16:17:05.86+00:00","url":"https://junglewise.ai/threats/cve-2026-9636-rockwell-automation-logix-controllers-improper-certificate"},{"cve":"CVE-2026-9292","cvss":8.4,"slug":"cve-2026-9292-rockwell-automation-factorytalk-datamosaix-private-cloud-xss-in","title":"Rockwell Automation FactoryTalk DataMosaix Private Cloud XSS in Workflows","severity":"info","exploited":false,"published_at":"2026-07-14T16:17:05.723+00:00","url":"https://junglewise.ai/threats/cve-2026-9292-rockwell-automation-factorytalk-datamosaix-private-cloud-xss-in"},{"cve":"CVE-2026-9128","cvss":7.3,"slug":"cve-2026-9128-rockwell-automation-studio-5000-logix-designer-unquoted-search","title":"Rockwell Automation Studio 5000 Logix Designer unquoted search path","severity":"info","exploited":false,"published_at":"2026-07-14T16:17:05.487+00:00","url":"https://junglewise.ai/threats/cve-2026-9128-rockwell-automation-studio-5000-logix-designer-unquoted-search"},{"cve":"CVE-2026-9127","cvss":7.3,"slug":"cve-2026-9127-rockwell-automation-studio-5000-logix-designer-incorrect","title":"Rockwell Automation Studio 5000 Logix Designer incorrect authorization in configuration file","severity":"info","exploited":false,"published_at":"2026-07-14T16:17:05.347+00:00","url":"https://junglewise.ai/threats/cve-2026-9127-rockwell-automation-studio-5000-logix-designer-incorrect"},{"cve":"CVE-2026-9108","cvss":6.7,"slug":"cve-2026-9108-rockwell-automation-studio-5000-logix-designer-path-traversal-in","title":"Rockwell Automation Studio 5000 Logix Designer path traversal in ACD files","severity":"info","exploited":false,"published_at":"2026-07-14T16:17:05.21+00:00","url":"https://junglewise.ai/threats/cve-2026-9108-rockwell-automation-studio-5000-logix-designer-path-traversal-in"},{"cve":"CVE-2026-12659","cvss":8.7,"slug":"cve-2026-12659-rockwell-automation-flex-5000-adapter-denial-of-service-via","title":"Rockwell Automation FLEX 5000 Adapter denial of service via crafted CIP packets","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:45.17+00:00","url":"https://junglewise.ai/threats/cve-2026-12659-rockwell-automation-flex-5000-adapter-denial-of-service-via"},{"cve":"CVE-2026-11917","cvss":8.1,"slug":"cve-2026-11917-rockwell-automation-thinmanager-path-traversal-in-api","title":"Rockwell Automation ThinManager path traversal in API","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:44.78+00:00","url":"https://junglewise.ai/threats/cve-2026-11917-rockwell-automation-thinmanager-path-traversal-in-api"},{"cve":"CVE-2025-11698","cvss":9.2,"slug":"cve-2025-11698-rockwell-automation-logix-controllers-buffer-overflow-in-boot","title":"Rockwell Automation Logix Controllers buffer overflow in boot firmware","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:41.837+00:00","url":"https://junglewise.ai/threats/cve-2025-11698-rockwell-automation-logix-controllers-buffer-overflow-in-boot"}],"vendor":{"hub":true,"name":"Rockwell Automation","slug":"rockwell-automation","homepage":"https://www.rockwellautomation.com/","description":"A global leader in industrial automation and digital transformation.","url":"https://junglewise.ai/threats/vendors/rockwell-automation"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":19},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2021-22681","cvss":9.8,"epss":0.1816,"slug":"cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix","title":"Rockwell Automation Logix Designer authentication bypass in Logix Controllers","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix"},{"cve":"CVE-2026-10577","cvss":10,"slug":"cve-2026-10577-rockwell-automation-1715-aentr-missing-authentication-on-debug","title":"Rockwell Automation 1715-AENTR missing authentication on debug port","severity":"info","exploited":false,"published_at":"2026-07-14T13:18:13.163+00:00","url":"https://junglewise.ai/threats/cve-2026-10577-rockwell-automation-1715-aentr-missing-authentication-on-debug"},{"cve":"CVE-2026-0647","cvss":9.4,"slug":"cve-2026-0647-rockwell-automation-1794-aentr-improper-authentication-in-web","title":"Rockwell Automation 1794-AENTR improper authentication in web server","severity":"info","exploited":false,"published_at":"2026-06-16T15:16:33.687+00:00","url":"https://junglewise.ai/threats/cve-2026-0647-rockwell-automation-1794-aentr-improper-authentication-in-web"},{"cve":"CVE-2026-9622","cvss":9.2,"epss":0.0043,"slug":"cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward","title":"Rockwell Automation RSLinx Classic denial-of-service in Forward Close service","severity":"info","exploited":false,"published_at":"2026-09-01T14:17:49.51+00:00","url":"https://junglewise.ai/threats/cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward"},{"cve":"CVE-2025-11698","cvss":9.2,"slug":"cve-2025-11698-rockwell-automation-logix-controllers-buffer-overflow-in-boot","title":"Rockwell Automation Logix Controllers buffer overflow in boot firmware","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:41.837+00:00","url":"https://junglewise.ai/threats/cve-2025-11698-rockwell-automation-logix-controllers-buffer-overflow-in-boot"},{"cve":"CVE-2025-12012","cvss":9.2,"slug":"cve-2025-12012-rockwell-automation-logix-controllers-buffer-overflow-in-file","title":"Rockwell Automation Logix Controllers buffer overflow in file handling","severity":"info","exploited":false,"published_at":"2026-07-14T15:16:54.21+00:00","url":"https://junglewise.ai/threats/cve-2025-12012-rockwell-automation-logix-controllers-buffer-overflow-in-file"},{"cve":"CVE-2025-12011","cvss":9.2,"slug":"cve-2025-12011-rockwell-automation-logix-controllers-buffer-overflow-in-project","title":"Rockwell Automation Logix Controllers buffer overflow in project loading","severity":"info","exploited":false,"published_at":"2026-07-14T15:16:53.323+00:00","url":"https://junglewise.ai/threats/cve-2025-12011-rockwell-automation-logix-controllers-buffer-overflow-in-project"},{"cve":"CVE-2025-13036","cvss":9.2,"slug":"cve-2025-13036-rockwell-automation-factorytalk-historian-se-authentication","title":"Rockwell Automation FactoryTalk Historian SE authentication bypass via race condition","severity":"info","exploited":false,"published_at":"2026-06-16T15:16:32.87+00:00","url":"https://junglewise.ai/threats/cve-2025-13036-rockwell-automation-factorytalk-historian-se-authentication"},{"cve":"CVE-2024-7953","cvss":8.8,"epss":0.0024,"slug":"cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation","title":"Rockwell Automation DataMosaix Private Cloud privilege escalation","severity":"info","exploited":false,"published_at":"2026-09-01T18:17:38.887+00:00","url":"https://junglewise.ai/threats/cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation"},{"cve":"CVE-2026-10714","cvss":8.8,"slug":"cve-2026-10714-rockwell-automation-factorytalk-services-platform-jwt-validation","title":"Rockwell Automation FactoryTalk Services Platform JWT validation bypass","severity":"info","exploited":false,"published_at":"2026-07-14T15:16:55.673+00:00","url":"https://junglewise.ai/threats/cve-2026-10714-rockwell-automation-factorytalk-services-platform-jwt-validation"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Rockwell Automation Arena Simulation","slug":"arena-simulation","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/arena-simulation"},{"name":"Rockwell Automation RSLinx Classic","slug":"rslinx-classic","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/rslinx-classic"},{"name":"Rockwell Automation Studio 5000 Logix Designer","slug":"studio-5000-logix-designer","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/studio-5000-logix-designer"},{"name":"Rockwell Automation CompactLogix 5380","slug":"compactlogix-5380","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/compactlogix-5380"},{"name":"Rockwell Automation ControlLogix 5580","slug":"controllogix-5580","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/controllogix-5580"},{"name":"Rockwell Automation DataMosaix Private Cloud","slug":"datamosaix-private-cloud","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/datamosaix-private-cloud"},{"name":"Rockwell Automation GuardLogix 5580","slug":"guardlogix-5580","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/guardlogix-5580"}]}