CVE-2026-10577 is a critical security vulnerability in the Rockwell Automation 1715-AENTR EtherNet/IP Adapter. The device exposes a debug port accessible over the network that lacks proper privilege controls and authentication. This allows unauthenticated remote attackers to access a command-line interface with intrusive capabilities, including file manipulation, task termination, memory modification, and I/O state changes. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function) and carries a CVSS 4.0 base score of 10.0, indicating critical severity. No vendor advisory or patch information is currently available, and the affected versions have not been explicitly stated.

Exploitation of this vulnerability can lead to unauthorized remote access to critical device functions without any authentication. Attackers could compromise the device's confidentiality by reading sensitive files, integrity by modifying memory and I/O states, and availability by stopping essential tasks. This could disrupt industrial control processes relying on the affected module.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device's debug port to trusted management networks only. Monitor for unusual activity related to the device and apply network segmentation to limit exposure. Follow Rockwell Automation's advisories for updates.