Double Free in Rockwell Automation The Flex 5000® Ethernet/ip Adapter
CVE-2026-12659
A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. A power cycle is required to recover the module and associated I/O.
Vulnerability class: Double Free
EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation The Flex 5000® Ethernet/ip Adapter — versions version 6.011