Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products

Rockwell Automation has issued patches and workarounds for over a dozen vulnerabilities spanning several of its industrial automation platforms. The updates address high-severity denial-of-service issues in RSLinx Classic and ControlLogix, as well as remote code execution flaws in FactoryTalk Historian and arbitrary code execution risks in the ControlFLASH firmware management utility.

Additional fixes resolve cross-site scripting attacks in ArmorStart Distributed Motor Controllers and privilege escalation vulnerabilities in both FactoryTalk Activation Manager and the Redundancy Module Configuration Tool. While an initial advisory flagged CVE-2026-9637 as exploited, CISA and subsequent documentation confirm there is no evidence of active exploitation.