cve 2026 9634

This tag covers CVE-2026-9634, a local privilege-escalation vulnerability in Rockwell Automation's Redundancy Module Configuration Tool. The flaw allows a standard Windows user to plant a malicious DLL and wait for an administrator to run the engineering utility, potentially leading to privilege escalation. Rockwell released version 10.01.00 to fix the issue, and CISA published an advisory on September 1, 2026. The tag also references the related CVE-2026-9633, which affects a separate executable. For organizations using the tool on shared engineering workstations, the guidance is to identify affected versions, remove ordinary-user write access from DLL search locations, and apply the vendor's fix.