Vulnerability intelligence

CVE-2026-9637

Rockwell Automation CompactLogix® 5380 / ControlLogix® 5580 CWE-119

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

CVSS Score

8.7

High

EPSS — Exploit Probability

0.4%

Riskier than 36% of all CVEs · checked 2026-10-16

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories