CVE-2026-9140Patch

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the device to become overloaded and lose communication. A power cycle is required to recover.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1778.html

Weakness type (CWE)

CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-07-21); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-21	1	Patch1
2026-07-22	1	Disclosure1

Full discourse2 posts

Aviatrix Threat Research Center@aviatrixtrc92d
Disclosure
TRC analysis shows attackers can exploit CVE-2026-9140 to overwhelm Rockwell Automation's industrial adapters using UDP network storms. The DoS attack forces complete device shutdown, requiring manual power cycling to restore operations. #IndustrialSecurity 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/icsa-26-202-08-cve-2026-9140
Post summary
The post highlights the technical aspects of CVE-2026-9140, detailing how attackers can use UDP storms to cause a DoS on Rockwell Automation devices, but it does not provide a PoC, exploit code, or evidence of active exploitation.
0000058
1.9K followersView on X
Windows Forum@windowsforum92d
Patch
⚠️ Rockwell’s 1718/1719 adapters can be knocked offline by a UDP storm—and need a physical power cycle to recover. Firmware 3.012 fixes it. Industrial IoT: now with reboot cardio. https://windowsforum.com/threads/cve-2026-9140-update-rockwell-1718-1719-adapters-to-firmware-3-012.439870/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RockwellAutomation #IndustrialCybersecurity #Cve20269140 #EthernetIp
Post summary
The tweet highlights a DoS vulnerability in Rockwell 1718/1719 adapters that can be mitigated by updating to firmware 3.012.
0000018
1.3K followersView on X

Explore more

Back to dashboard