CVE-2026-0647

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.

• CWE-306

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1775.html

Published

Jun 16, 2026

Last Modified

Jun 17, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0639in OpenHarmony v6.0 and prior versions allow a local attacke…5.5
• CVE-2026-0640A weakness has been identified in Tenda AC23 16.03.07.52. Th…9.8
• CVE-2026-0641A security vulnerability has been detected in TOTOLINK WA300…8.8
• CVE-2026-0642A vulnerability was detected in projectworlds House Rental a…6.1
• CVE-2026-0643A flaw has been found in projectworlds House Rental and Prop…9.8
• CVE-2026-0646A denial-of-service security issue exists within the 1794-AE…8.7
• CVE-2026-0648The vulnerability stems from an incorrect error-checking log…6.3
• CVE-2026-0649A security vulnerability has been detected in invoiceninja u…4.7
• CVE-2026-0650OpenFlagr versions prior to and including 1.1.18 contain an …9.3
• CVE-2026-0651A path traversal vulnerability was identified TP-Link Tapo C…7.8
• CVE-2026-0652On TP-Link Tapo C260 v1, command injection vulnerability exi…8.8
• CVE-2026-0653On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authentic…6.5