🔐 CVE Alert

CVE-2026-9653

UNKNOWN 0.0

1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

CWE CWE-354
Vendor rockwell automation
Product 1756-en2, 1756-en3
Published Jul 14, 2026
Last Updated Jul 14, 2026
Stay Ahead of the Next One

Get instant alerts for rockwell automation 1756-en2, 1756-en3

Be the first to know when new unknown vulnerabilities affecting rockwell automation 1756-en2, 1756-en3 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Rockwell Automation / 1756-EN2, 1756-EN3
12.001 and before
Rockwell Automation / 1756-ENBT
6.006

References

NVD ↗ CVE.org ↗ EPSS Data ↗
rockwellautomation.com: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1780.html