Rockwell Automation recently released patches for over a dozen vulnerabilities that affect its industrial automation products. The company has made available workarounds and fixes for these issues, which range from denial-of-service (DoS) flaws to remote code execution problems. One critical vulnerability, identified as CVE-2026-9637, affects the RSLinx Classic communications software and could cause it to crash if exploited.
The majority of the vulnerabilities discovered by Rockwell Automation are related to its control systems and software. These include high-severity issues in ControlLogix and CompactLogix controllers, as well as FactoryTalk Historian Machine Edition. Additionally, multiple cross-site scripting (XSS) vulnerabilities have been patched in ArmorStart Distributed Motor Controllers.
The patching effort also includes fixes for the ControlFLASH firmware management utility, which could allow an attacker to execute arbitrary code on a target machine at the logged-in user’s permission level. Furthermore, a high-severity privilege escalation flaw has been resolved in the Redundancy Module Configuration Tool.
It is worth noting that while one of the advisories mentions exploitation of CVE-2026-9637, this appears to be an error as both Rockwell Automation and CISA have stated they are not aware of any instances where the vulnerability was exploited. Nonetheless, users should still take steps to address these vulnerabilities by applying patches or implementing workarounds.
The presence of DoS issues in multiple products highlights the importance of proper network configuration and security measures. These types of vulnerabilities can be particularly concerning for industrial control systems as they can lead to disruptions in production processes.
Rockwell Automation’s proactive approach to addressing these vulnerabilities is commendable, and users should ensure that all affected products are updated promptly to prevent potential exploitation. This incident serves as a reminder that even well-established companies can have vulnerabilities, underscoring the need for ongoing security awareness and vigilance within industrial automation environments.
To take advantage of these patches, Rockwell Automation customers will need to download and apply the relevant updates to their systems. Additionally, users should review the company’s advisories and workarounds carefully to ensure they understand the specific requirements for addressing each vulnerability.
In conclusion, while these vulnerabilities pose a significant risk to industrial automation systems, prompt action can mitigate this threat. Users are advised to prioritize patching and updating affected products to prevent potential exploitation, highlighting the importance of proactive security measures in maintaining system integrity.
Source: SecurityWeek — 2026-09-02