Skip to content
OpenAdvisories
High ICSA-26-246-04 2 CVEs

Rockwell Automation ArmorStart LT

Published Sep 3, 2026 · Updated Sep 3, 2026

Vendor: Rockwell Automation Product: ArmorStart® LT

Summary

Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page.

Vulnerabilities 2

  • High 8.7
    CVE-2026-19472

    Rockwell Automation ArmorStart® LT Denial Of Service

    A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability

    Rockwell Automation ArmorStart® LT ICS / OT
  • Medium 6.9
    CVE-2026-19471

    Rockwell Automation ArmorStart® LT Stored Cross-site scripting

    Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users …

    Rockwell Automation ArmorStart® LT ICS / OT

Revision history

  1. #1

    Initial Republication of Rockwell Automation security advisory.

References