Will CVE-2026-0646 (Rockwell FLEX I/O) be added to CISA KEV by end of 2026?

Rockwell Automation has disclosed CVE-2026-0646 affecting FLEX I/O EtherNet/IP Adapters v2.012, exposing critical ICS/OT networks to unauthorized access, account takeover, and denial of service. CISA advisory issued. Resolution if the vulnerability is added to CISA's Known Exploited Vulnerabilities catalog.

Resolution Criteria

Addition of CVE-2026-0646 to the official CISA KEV catalog, confirmed via CISA.gov or official vendor/CISA advisory.