← All Advisories

CVE-2026-12655

Last refreshed2026-10-13

Status: UPDATED  |  Advisory ID: CVE-2026-12655

Key Details

CVECVE-2026-12655
CVSS Score / Version
8.8 (High) / CVSS v4.0
Updated2026-10-13
Affected products
Rockwell Automation 1732E ArmorBlock® I/O
Classified as
CWE-294 (Authentication Bypass by Capture-replay)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Rockwell Automation1732E ArmorBlock® I/O
SubsystemsGeneral OT
SectorsMultiple

What to Know

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration. (NVD)

What to Do

Monitor Rockwell Automation's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-12655
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-12655