What’s Vulnerable › Vulnerabilities

CVE-2026-84235: Rockwell Automation 1756-ENBT Denial of Service Vulnerability

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-01 · updated 2026-09-01
• Weakness: CWE-400

Description

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover.

Affected products

• Rockwell Automation 1756-ENBT Module: all versions

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1798.html

Get alerted when CVE-2026-84235 or the next vulnerability affects your stack