CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.

• CWE-276

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1800.html

Published

Sep 1, 2026

Last Modified

Sep 1, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-96275A malicious or compromised Flatpak repository can write atta…8.8
• CVE-2026-96276If a malicious SDK container declares an extension point wit…9.8
• CVE-2026-9628A weakness has been identified in UTT HiPER 1200GW up to 2.5…8.8
• CVE-2026-9629The Canvas plugin for WordPress is vulnerable to Stored Cros…6.4
• CVE-2026-9631A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7…8.8
• CVE-2026-9632A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907…8.8
• CVE-2026-9634A security issue exists within the Redundancy Module Configu…7
• CVE-2026-9635The WP Shortcode by MyThemeShop plugin for WordPress is vuln…6.4
• CVE-2026-9636A security issue exists within CompactLogix® 5380, ControlLo…8.2
• CVE-2026-9637A denial-of-service security issue exists in the affected Lo…8.7
• CVE-2026-9638Crypt::PBKDF2 versions before 0.261630 for Perl generate ins…7.5
• CVE-2026-9639Nil-pointer dereference in CreateCustomVolumeFromBackup in L…6.5