Cve 2026 9653
The latest Cve 2026 9653 coverage — news, analysis, and updates from the WindowsNews.AI desk.
How to Test-Drive Windows Server 2025’s New Security and Hybrid Features Before Upgrading
Microsoft's refreshed Windows Server 2025 Evaluation Center listing provides a 180-day trial ISO for Standard and Datacenter editions. IT teams can test new security defaults, hybrid management via Azure Arc, and infrastructure upgrades like GPU partitioning before committing to production, but must plan carefully around installation mode choices and conversion limitations.
Urgent Update: Patch These Rockwell ControlLogix Modules Now, Or Face Network Disruption
CISA released a high-severity advisory for Rockwell Automation ControlLogix EtherNet/IP modules. The denial-of-service flaw (CVE-2026-9653) affects EN2, EN3, and the discontinued ENBT. While newer modules get firmware V12.002, the ENBT has no fix, forcing owners to either replace the hardware or implement strict network isolation. Plant teams should inventory affected devices, patch immediately where possible, and plan replacements for unsupported legacy hardware.
AutomationDirect Ships Productivity Suite v4.7.0.47 to Plug Six Security Holes, Two Let Attackers Hijack Kernels
AutomationDirect released Productivity Suite v4.7.0.47 to fix six vulnerabilities reported by CISA, including two high-severity out-of-bounds write flaws that can let local attackers escalate privileges or crash the system. The flaws affect all versions up to 4.6.2.2 and are not remotely exploitable, but industrial workstations with broad physical and user access remain at risk. A six-step remediation plan covers inventory, update deployment, and ongoing asset management to close the gaps.
Patch Now: Rockwell Arena Simulation Software Harbors Four Code-Execution Flaws
Rockwell Automation has released Arena 17.00.01 to patch four out-of-bounds write vulnerabilities (CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, CVE-2026-8314) that allow arbitrary code execution when a user opens a malicious file. All versions through 17.00.00 are affected, and the update is the only remediation. No active exploits were reported at the time of the July 2026 CISA advisory, but industrial users should patch immediately and apply least-privilege and segmentation controls.
A Simple Housekeeping Request Can Crash NASA's Core Flight Software — Patch Ready
CISA's advisory for CVE-2026-15352 warns that a routine Housekeeping Telemetry request can crash NASA's Core Flight System Health & Safety application, causing denial of service. The fix is updating to version 7.0.1, released in May 2026. While the software primarily runs on Linux flight hardware, Windows administrators involved in development, testing, or monitoring cFS environments should inventory their systems, restrict network access, and apply the patch to prevent disruptions.
FactoryTalk DataMosaix stored XSS could lead to account takeover — patch now
Rockwell Automation has patched a stored cross-site scripting vulnerability (CVE-2026-9292) in FactoryTalk DataMosaix Private Cloud that lets a high-privilege attacker inject malicious scripts into Workflow configurations, later executing in other users’ browsers. Affected versions 8.02 and earlier should be upgraded to 8.03 immediately to prevent account takeover, credential theft, or session hijacking. No public exploitation is known, but the patch is the only complete fix.
Upgrade to SALTO ProAccess Space 6.13 Now, CISA Warns, as Partition Bypass Flaw Found
CISA issued an advisory for CVE-2026-11889, an authorization bypass flaw in SALTO ProAccess Space that affects deployments with partitioning enabled. Organizations must upgrade to version 6.13 and apply mitigations such as least privilege and network isolation. The vulnerability requires authenticated operator credentials, limiting the risk to internal threats.
Siemens Issues Emergency Fix for SICAM 8 Flaw That Allows Malicious Firmware Installation on Power Grid Devices
Siemens' latest patch for SICAM 8 industrial control devices closes four vulnerabilities, including a firmware validation flaw that could let attackers install persistent malicious code. Operators must update immediately and review their network segmentation and OPC UA security settings.
Rockwell Automation Adapter Flaw Forces Manual Power Cycling – Windows-Based Control Systems at Risk
CVE-2026-12659 is a high-severity denial-of-service vulnerability in Rockwell Automation's Flex 5000 Adapter firmware 6.011, exploitable over the network with no privileges. Recovery requires a physical power cycle, making it uniquely disruptive for industrial operations. Affected owners must upgrade to version 6.012; Windows administrators should also harden any engineering workstations that communicate with these adapters to block potential attack paths.
Rockwell Logix Firmware Flaw Allows Instant Controller Crash—Patches Released
Rockwell Automation has disclosed three critical firmware vulnerabilities in its Logix controllers that could allow remote attackers to trigger major non-recoverable faults, instantly halting industrial processes. Patches are available for dozens of affected models, and CISA urges immediate action. This article details the flaws, the specific firmware versions that fix them, and a practical action plan for OT admins and Windows administrators to protect their facilities.
E3’s Email Security Upgrade Lands by August 1—Here’s Your Setup Playbook
Microsoft is adding Defender for Office 365 Plan 1 to commercial E3 subscriptions, giving organizations advanced anti-phishing, Safe Links, and Safe Attachments at no extra license cost. But the features aren’t automatic: admins must configure policies to defend against impersonation attacks and malicious attachments. This guide walks through the must-do steps before the August 1 deadline.
21% of Windows Devices Are Still on Windows 10. The Upgrade Rush Is Over—Now Comes the Hard Part.
Eight months after Windows 10’s support ended, Lansweeper data reveals 21% of Windows devices still run the outdated OS, heavily concentrated in healthcare, manufacturing, and SMBs. Extended Security Updates provide a temporary bridge through 2028 for businesses and 2026 for consumers, but rising costs and hardware barriers demand immediate inventory, classification, and a funded exit plan.
Two Windows Deadlines Converging on October 13, 2026: A Practical Guide
Microsoft has given a 90-day notice that Windows 11 24H2 Home and Pro, along with the decade-old Windows 10 Enterprise LTSB 2016, will stop receiving security updates on October 13, 2026. For most home users, staying current is a simple feature update, but LTSB 2016 devices—often embedded in critical industrial roles—face a complex migration that the paid Extended Security Updates program can only temporarily bridge.