CVE-2026-9637CWE-119
CVE-2026-9637
published September 1, 2026
What it is
A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover
The record
Technical detail
- CVSS
- 8.7 · NONE
- CVSS v4.0
- 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00428 · 36.0th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2026-09-01T18:17Z
References (1)
EPSS history
Timeline