Vulnerability intelligence

CVE-2026-9653

Rockwell Automation 1756-EN2, 1756-EN3 CWE-354

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

CVSS Score

8.7

High

EPSS — Exploit Probability

0.2%

Riskier than 13% of all CVEs · checked 2026-10-11

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories