Skip to content
Threat Feed
Subscribe

Tag

Information-Technology

2 briefs RSS
medium advisory

Rockwell Automation Flex 5000 Adapter Vulnerability Leads to Denial of Service

A denial-of-service vulnerability (CVE-2026-12659), categorized as a Double Free issue (CWE-415), exists in Rockwell Automation Flex 5000 Adapter version 6.011 due to improper handling of crafted CIP packets, which could allow an unauthenticated attacker to cause a denial-of-service condition requiring a power cycle to recover.

Flex 5000 Adapter ics ot critical-manufacturing information-technology denial-of-service vulnerability
2t 1c
high threat

Multiple Vulnerabilities in Digi International PortServer TS and Digi One SP IA Devices

Multiple vulnerabilities, including CVE-2026-12352 (incorrect authorization) and CVE-2026-12948 (stored cross-site scripting), affect Digi International PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA devices with firmware prior to 2025, allowing unauthenticated bypass, access to restricted resources, credential acquisition, and client-side script execution in critical infrastructure environments.

exploited PortServer TS +3 ics ot network webserver vulnerability authentication-bypass xss critical-manufacturing +3
2t 2c