Remote Code Execution Vulnerability in Rockwell Automation Products

CVE-2026-6071

What is CVE-2026-6071?

A remote code execution vulnerability exists in Rockwell Automation products when parsing DOE files. This security issue allows a remote attacker to write past the end of an allocated object, which may lead to the execution of arbitrary code within the context of the current process. Exploitation requires a legitimate user to either visit a malicious webpage or open a crafted malicious file, making it imperative for users to exercise caution while handling external content.

References