Threat+Constellation
Live— UTC
← Incidents
INCIDENT 418PhishingLOW / UNDER REVIEWSourced

Rockwell Automation ControlFLASH

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-246-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of the attacker&#039;s choice on a target machine at the logged-in user&#039;s permission level.</strong></p> <p>The following versions of Rockwell Automation ControlFLASH are affected:</p> <ul> <li>ControlFLASH <=V15.07 (CVE-2026-12663)</li> </ul> <div class="csaf-table"> <table class="tablesaw tablesaw-stack" data-tables…

Last evidence update
03 SEP 2026 · 12:00 UTC
Source count
1
Status
reported
United StatesManufacturingEnergyUtilitiesDefenseCVE-2026-12663
Observation history

How this record has evolved as evidence accumulated.

04 SEP · 05:22 UTC
Initial report
Evidence