Auth bypass in Rockwell Automation Flex I/o Ethernet/ip Adapters

CVE-2026-0647

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request…

Vulnerability class: Broken Authentication

Affected products

Weakness classification (CWE)

References