CVE-2026-06478.8HighCWE-306
Rockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities
Rockwell Automation · FLEX I/O EtherNet/IP Adapters
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
37th percentile
050100
Higher than 37% of scored CVEs
8.8HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 19 Jun.
- Rockwell Automation patches multiple ICS flawsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.