WID-SEC-W-2026-0832

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

CODESYS: Mehrere Schwachstellen

view advisory published 2026-03-23

Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-3509US——
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a…
CVE-2025-41660US——
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan