Will CVE-2025-12011 (Rockwell Automation CompactLogix/ControlLogix) be added to CISA KEV by Sept 2026?

CISA alerted on CVE-2025-12011 affecting Rockwell Automation CompactLogix 5370 (≤V35.015), ControlLogix, Compact GuardLogix, and GuardLogix. Successful exploitation can cause denial-of-service in critical ICS/OT environments. Resolution depends on demonstration of exploitation in the wild and CISA KEV addition.

Resolution Criteria

YES if CVE-2025-12011 is added to CISA's Known Exploited Vulnerabilities Catalog by Sept 30, 2026, confirmed by official CISA KEV listing. NO if no KEV addition by deadline.