CVE-2026-0646

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-0646

Key Details

CVE	CVE-2026-0646
CVSS Score / Version	8.7 (High) / CVSS v4.0
Updated	2026-06-17
Affected products	Rockwell Automation FLEX I/O EtherNet/IP Adapters
Classified as	CWE-401 (Missing Release of Memory after Effective Lifetime)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Rockwell Automation	FLEX I/O EtherNet/IP Adapters

Vendor

Product

Affected Versions

Patch Status

Rockwell Automation

FLEX I/O EtherNet/IP Adapters

Subsystems	General OT
Sectors	Multiple

What to Know

A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover. (NVD)

What to Do

Monitor Rockwell Automation's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-0646
CVE	https://www.cve.org/CVERecord?id=CVE-2026-0646

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-0646

CVE