CVE-2026-12655
1732E ArmorBlock® - Multiple Vulnerabilities
Published Oct 13, 2026 · updated Oct 15, 2026 · Rockwell Automation 1732E ArmorBlock® I/O
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Oct 15, 2026 · CIRCL Vulnerability Lookup
Updated
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
Affected
- vendor Rockwell Automation 1732E ArmorBlock® I/Oversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-12655
A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-12655
Official CVE identifier
cve.org