Status: UPDATED | Advisory ID: CVE-2026-11317
| CVE | CVE-2026-11317 |
| CVSS Score / Version | 8.7 (High) / CVSS v4.0 |
| Updated | 2026-06-17 |
| Affected products | Rockwell Automation CompactLogix, ControlLogix |
| Classified as | CWE-404 (Improper Resource Shutdown or Release) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Rockwell Automation | CompactLogix, ControlLogix |
| Subsystems | General OT |
| Sectors | Multiple |
A denial of service security issue exists in the
affected product. The security issue stems from a fault occurring when a
crafted CIP message is sent. Devices with less memory are more likely to be
affected. This can result in a major nonrecoverable fault (MNRF). A program
download is required to recover. (NVD)
Monitor Rockwell Automation's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-11317 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-11317 |