Rockwell Automation released security fixes for multiple industrial control products used in factories and critical operations. The updates cover FactoryTalk Historian Site Edition flaws that can bypass authentication and cause denial of service, a FactoryTalk Analytics PavilionX improper API authorization bug that can allow unauthorized administrative actions, denial-of-service issues in CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers, and a critical unauthenticated flaw in Flex I/O dual-port Ethernet/IP adapters that can let an attacker change the web interface password and potentially take over access. CISA redistributed the advisories, and Rockwell said the newly patched issues are not known to be exploited in the wild.
Why it matters: Organizations running Rockwell industrial equipment should review and apply these updates promptly because the affected products can be used in operational technology environments where outages or unauthorized access can disrupt physical processes. Even without confirmed active exploitation, the mix of critical and high-severity bugs makes this a patch-now item for defenders responsible for ICS and OT systems.
Eduard Kovacs
2026.07.15
82% relevant
This article updates the same underlying Rockwell July ICS advisory wave with additional specifics, including critical flaws in 1715 Redundant IO and DoS issues in CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers, plus other high-severity Rockwell product fixes distributed by CISA.
Eduard Kovacs
2026.06.17
100% relevant
This article establishes a new patch-and-advisory story focused on Rockwell Automation's June 2026 fixes for multiple ICS and OT products, with no existing tracked story covering this specific release.
← Back to all stories