CVE-2026-9637: CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities
Published Sep 1, 2026
·Updated
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover
Affected Software
2 affected components
Rockwell Automation CompactLogix 5380
Rockwell Automation ControlLogix 5580
Event History
Sep 1, 2026
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
DescriptionWeakness
Frequently Asked Questions
1
Which systems are identified as affected?
The affected products identified are Rockwell Automation CompactLogix 5380 and ControlLogix 5580.
2
Are affected software versions or interim mitigations specified?
The provided information does not identify affected version ranges or any mitigation steps.