Denial-of-Service Vulnerability in ArmorStart® LT by Rockwell Automation
CVE-2026-19472

8.7HIGH

Key Information:

Vendor
CVE Published:
1 September 2026

What is CVE-2026-19472?

A denial-of-service issue has been identified in ArmorStart® LT, resulting from improper handling of specially crafted HTTP PUT requests directed at the device's embedded web server. This vulnerability can lead to a significant disruption in web server availability, impairing the functionality of operations reliant on the server. It is crucial for users to implement security measures or patches as recommended by Rockwell Automation to mitigate potential impacts.

Affected Version(s)

ArmorStart® LT v2.001 and below

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.