# Rockwell Automation vulnerabilities Source: https://junglewise.ai/threats/vendors/rockwell-automation Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/rockwell-automation.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 48 vulnerabilities in Rockwell Automation: 0 in the last 7 days and 19 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-12656, was published on 13 October 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 7 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 19 - All time: 48 (1 critical, 1 exploited in the wild) ## About Rockwell Automation A global leader in industrial automation and digital transformation. ## Latest Rockwell Automation vulnerabilities - [CVE-2026-12656: Rockwell Automation 1732E ArmorBlock denial of service in network storm handling](https://junglewise.ai/threats/cve-2026-12656-a-denial-of-service-security-issue-exists-in-the-affected-product) (info, published 13 Oct 2026) - [CVE-2026-12655: Rockwell Automation 1732E ArmorBlock authentication bypass](https://junglewise.ai/threats/cve-2026-12655-a-security-issue-exists-within-1732e-armorblock-i-o-where-an) (info, published 13 Oct 2026) - [CVE-2024-7956: Rockwell Automation DataMosaix Private Cloud incorrect authorization](https://junglewise.ai/threats/cve-2024-7956-rockwell-automation-datamosaix-private-cloud-incorrect) (info, CVSS 8.1, published 2 Sep 2026) - [CVE-2024-7953: Rockwell Automation DataMosaix Private Cloud privilege escalation](https://junglewise.ai/threats/cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation) (info, CVSS 8.8, published 1 Sep 2026) - [CVE-2024-7952: Rockwell Automation DataMosaix Private Cloud sensitive data exposure](https://junglewise.ai/threats/cve-2024-7952-rockwell-automation-datamosaix-private-cloud-sensitive-data) (info, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-9637: Rockwell Automation Logix Platform denial-of-service in CIP message processing](https://junglewise.ai/threats/cve-2026-9637-rockwell-automation-logix-platform-denial-of-service-in-cip) (info, CVSS 8.7, published 1 Sep 2026) - [CVE-2026-9634: Rockwell Automation Redundancy Module Configuration Tool DLL search path privilege escalation](https://junglewise.ai/threats/cve-2026-9634-rockwell-automation-redundancy-module-configuration-tool-dll) (info, CVSS 7.3, published 1 Sep 2026) - [CVE-2026-9633: Rockwell Automation Redundancy Module Configuration Tool DLL hijacking](https://junglewise.ai/threats/cve-2026-9633-rockwell-automation-redundancy-module-configuration-tool-dll) (info, CVSS 7.3, published 1 Sep 2026) - [CVE-2026-9625: Rockwell Automation RSLinx Classic denial-of-service in CIP packet handling](https://junglewise.ai/threats/cve-2026-9625-rockwell-automation-rslinx-classic-denial-of-service-in-cip-packet) (info, CVSS 8.7, published 1 Sep 2026) - [CVE-2026-9624: Rockwell Automation RSLinx Classic denial-of-service via malformed CIP packet](https://junglewise.ai/threats/cve-2026-9624-rockwell-automation-rslinx-classic-denial-of-service-via-malformed) (info, CVSS 8.7, published 1 Sep 2026) - [CVE-2026-9622: Rockwell Automation RSLinx Classic denial-of-service in Forward Close service](https://junglewise.ai/threats/cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward) (info, CVSS 9.2, published 1 Sep 2026) - [CVE-2026-9621: Rockwell Automation RSLinx Classic denial-of-service via malformed CIP packet](https://junglewise.ai/threats/cve-2026-9621-rockwell-automation-rslinx-classic-denial-of-service-via-malformed) (info, CVSS 8.6, published 1 Sep 2026) - [CVE-2026-16675: Rockwell Automation FactoryTalk Activation Manager privilege escalation in installer](https://junglewise.ai/threats/cve-2026-16675-rockwell-automation-factorytalk-activation-manager-privilege) (info, CVSS 8.5, published 1 Sep 2026) - [CVE-2026-12663: Rockwell Automation ControlFLASH improper access control in installer](https://junglewise.ai/threats/cve-2026-12663-rockwell-automation-controlflash-improper-access-control-in) (info, CVSS 7.3, published 1 Sep 2026) - [CVE-2026-12661: Rockwell Automation FactoryTalk Historian Machine Edition stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-12661-rockwell-automation-factorytalk-historian-machine-edition-stack) (info, CVSS 4.5, published 1 Sep 2026) - [CVE-2025-12768: Rockwell Automation FactoryTalk Historian Machine Edition out-of-bounds write](https://junglewise.ai/threats/cve-2025-12768-rockwell-automation-factorytalk-historian-machine-edition-out-of) (info, CVSS 8, published 1 Sep 2026) - [CVE-2026-84235: Rockwell Automation 1756-ENBT denial of service in CIP packet handling](https://junglewise.ai/threats/cve-2026-84235-rockwell-automation-1756-enbt-denial-of-service-in-cip-packet) (info, CVSS 8.7, published 1 Sep 2026) - [CVE-2026-19472: Rockwell Automation ArmorStart LT denial of service in HTTP PUT handler](https://junglewise.ai/threats/cve-2026-19472-rockwell-automation-armorstart-lt-denial-of-service-in-http-put) (info, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-19471: Rockwell Automation ArmorStart LT stored cross-site scripting](https://junglewise.ai/threats/cve-2026-19471-rockwell-automation-armorstart-lt-stored-cross-site-scripting) (info, CVSS 7.3, published 1 Sep 2026) - [CVE-2026-9636: Rockwell Automation Logix Controllers improper certificate revocation check](https://junglewise.ai/threats/cve-2026-9636-rockwell-automation-logix-controllers-improper-certificate) (info, CVSS 8.2, published 14 Jul 2026) - [CVE-2026-9292: Rockwell Automation FactoryTalk DataMosaix Private Cloud XSS in Workflows](https://junglewise.ai/threats/cve-2026-9292-rockwell-automation-factorytalk-datamosaix-private-cloud-xss-in) (info, CVSS 8.4, published 14 Jul 2026) - [CVE-2026-9128: Rockwell Automation Studio 5000 Logix Designer unquoted search path](https://junglewise.ai/threats/cve-2026-9128-rockwell-automation-studio-5000-logix-designer-unquoted-search) (info, CVSS 7.3, published 14 Jul 2026) - [CVE-2026-9127: Rockwell Automation Studio 5000 Logix Designer incorrect authorization in configuration file](https://junglewise.ai/threats/cve-2026-9127-rockwell-automation-studio-5000-logix-designer-incorrect) (info, CVSS 7.3, published 14 Jul 2026) - [CVE-2026-9108: Rockwell Automation Studio 5000 Logix Designer path traversal in ACD files](https://junglewise.ai/threats/cve-2026-9108-rockwell-automation-studio-5000-logix-designer-path-traversal-in) (info, CVSS 6.7, published 14 Jul 2026) - [CVE-2026-12659: Rockwell Automation FLEX 5000 Adapter denial of service via crafted CIP packets](https://junglewise.ai/threats/cve-2026-12659-rockwell-automation-flex-5000-adapter-denial-of-service-via) (info, CVSS 8.7, published 14 Jul 2026) ## Most severe Rockwell Automation vulnerabilities - [CVE-2021-22681: Rockwell Automation Logix Designer authentication bypass in Logix Controllers](https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix) (critical, exploited in the wild, CVSS 9.8, published 5 Mar 2026) - [CVE-2026-10577: Rockwell Automation 1715-AENTR missing authentication on debug port](https://junglewise.ai/threats/cve-2026-10577-rockwell-automation-1715-aentr-missing-authentication-on-debug) (info, CVSS 10, published 14 Jul 2026) - [CVE-2026-0647: Rockwell Automation 1794-AENTR improper authentication in web server](https://junglewise.ai/threats/cve-2026-0647-rockwell-automation-1794-aentr-improper-authentication-in-web) (info, CVSS 9.4, published 16 Jun 2026) - [CVE-2026-9622: Rockwell Automation RSLinx Classic denial-of-service in Forward Close service](https://junglewise.ai/threats/cve-2026-9622-rockwell-automation-rslinx-classic-denial-of-service-in-forward) (info, CVSS 9.2, published 1 Sep 2026) - [CVE-2025-11698: Rockwell Automation Logix Controllers buffer overflow in boot firmware](https://junglewise.ai/threats/cve-2025-11698-rockwell-automation-logix-controllers-buffer-overflow-in-boot) (info, CVSS 9.2, published 14 Jul 2026) - [CVE-2025-12012: Rockwell Automation Logix Controllers buffer overflow in file handling](https://junglewise.ai/threats/cve-2025-12012-rockwell-automation-logix-controllers-buffer-overflow-in-file) (info, CVSS 9.2, published 14 Jul 2026) - [CVE-2025-12011: Rockwell Automation Logix Controllers buffer overflow in project loading](https://junglewise.ai/threats/cve-2025-12011-rockwell-automation-logix-controllers-buffer-overflow-in-project) (info, CVSS 9.2, published 14 Jul 2026) - [CVE-2025-13036: Rockwell Automation FactoryTalk Historian SE authentication bypass via race condition](https://junglewise.ai/threats/cve-2025-13036-rockwell-automation-factorytalk-historian-se-authentication) (info, CVSS 9.2, published 16 Jun 2026) - [CVE-2024-7953: Rockwell Automation DataMosaix Private Cloud privilege escalation](https://junglewise.ai/threats/cve-2024-7953-rockwell-automation-datamosaix-private-cloud-privilege-escalation) (info, CVSS 8.8, published 1 Sep 2026) - [CVE-2026-10714: Rockwell Automation FactoryTalk Services Platform JWT validation bypass](https://junglewise.ai/threats/cve-2026-10714-rockwell-automation-factorytalk-services-platform-jwt-validation) (info, CVSS 8.8, published 14 Jul 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 17 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 2 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Rockwell Automation technologies - [Rockwell Automation Arena Simulation](https://junglewise.ai/threats/technologies/arena-simulation): 4 vulnerabilities - [Rockwell Automation RSLinx Classic](https://junglewise.ai/threats/technologies/rslinx-classic): 4 vulnerabilities - [Rockwell Automation Studio 5000 Logix Designer](https://junglewise.ai/threats/technologies/studio-5000-logix-designer): 4 vulnerabilities - [Rockwell Automation CompactLogix 5380](https://junglewise.ai/threats/technologies/compactlogix-5380): 3 vulnerabilities - [Rockwell Automation ControlLogix 5580](https://junglewise.ai/threats/technologies/controllogix-5580): 3 vulnerabilities - [Rockwell Automation DataMosaix Private Cloud](https://junglewise.ai/threats/technologies/datamosaix-private-cloud): 3 vulnerabilities - [Rockwell Automation GuardLogix 5580](https://junglewise.ai/threats/technologies/guardlogix-5580): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Rockwell Automation vulnerabilities", https://junglewise.ai/threats/vendors/rockwell-automation, 13 November 2026.