Rockwell Automation Patches Over a Dozen Vulnerabilities Across

What happened

Rockwell Automation has released a comprehensive suite of security advisories addressing more than a dozen vulnerabilities discovered across its major industrial software and hardware product lines. The security updates patch security flaws found in widely deployed systems, including RSLinx Classic, ArmorStart, ControlFLASH, and FactoryTalk. Industrial organizations rely on these systems to configure, monitor, and control physical machinery in critical infrastructure environments, making the resolution of these vulnerabilities a high priority

Rockwell Automation on Tuesday informed customers that patches or workarounds are available for more than a dozen vulnerabilities discovered across its industrial automation products. It covers four critical and high-severity denial-of-service (DoS) issues affecting the RSLinx Classic communications software.

How it works

Exploitation can cause the RSLinx Classic service to crash, requiring a restart for recovery. Rockwell’s advisory for CVE-2026-9637, a high-severity DoS flaw in ControlLogix and CompactLogix controllers, flags the vulnerability as exploited.

Why it matters

However, it’s likely an error, as it’s only listed as such in the document’s header; elsewhere it’s listed as not exploited. See the full write-up from SecurityWeek via the source link for quotes and complete context.

Who is affected

Read the original coverage at SecurityWeek via the source link above for the complete details and primary quotes.

What to watch next

Cross-check release notes and official docs before changing production systems based on early reporting.