CVE-2026-12659

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-12659

Key Details

CVE	CVE-2026-12659
CVSS Score / Version	8.7 (High) / CVSS v4.0
Updated	2026-07-14
Affected products	Rockwell Automation The FLEX 5000® EtherNet/IP Adapter
Classified as	CWE-415 (Double Free)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Rockwell Automation	The FLEX 5000® EtherNet/IP Adapter

Vendor

Product

Affected Versions

Patch Status

Rockwell Automation

The FLEX 5000® EtherNet/IP Adapter

Subsystems	General OT
Sectors	Multiple

What to Know

A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. A power cycle is required to recover the module and associated I/O. (NVD)

What to Do

Monitor Rockwell Automation's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-12659
CVE	https://www.cve.org/CVERecord?id=CVE-2026-12659

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-12659

CVE