Rockwell Automation Flex 5000 Adapter

CISA published a security advisory for Rockwell Automation Flex 5000 Adapter version 6.011, disclosing a denial-of-service vulnerability (CVE-2026-12659) triggered by crafted CIP packets that cause a double-free error, requiring a power cycle to recover. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) and affects critical manufacturing and IT infrastructure worldwide. If you build manufacturing floor automation, security appliances, or networked factory hardware, you now know a major control system runs unpatched on thousands of production lines worldwide. There's a 48-72 hour window before exploit tooling follows disclosure—your installed base is a target.