CVE-2026-81572

highPriorität · verfolgen · 0EPSS 0.002 · 7. PerzentilCHDENL
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.18% (7th) EPSS
CVSS 7.8 · high
Is it mine?
161 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
abb_psirt · cert_bund · ncsc_nl · sick_psirt

EPSS · bewertet 2026-10-22

In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary file that points to an arbitrary system path. Because CodeMeter Runtime runs with System privileges, this could allow arbitrary files to be deleted with System privileges and potentially enable local privilege escalation.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenAutomation Builderabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at earliest convenience. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - Automation Builder: Version 2.10.0 (expected by Q1/2027) - Drive Application Bulder: not planned, will be transferred to the Classic lifecycle phase end of Q3/2026 - Virtual Drive: Version 1.5.1 - Virtual DrivePlus: Version 1.70 (expected by Q4/2026)

  • BehobenDrive Application Bulderabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at earliest convenience. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - Automation Builder: Version 2.10.0 (expected by Q1/2027) - Drive Application Bulder: not planned, will be transferred to the Classic lifecycle phase end of Q3/2026 - Virtual Drive: Version 1.5.1 - Virtual DrivePlus: Version 1.70 (expected by Q4/2026)

  • BehobenVirtual Driveabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at earliest convenience. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - Automation Builder: Version 2.10.0 (expected by Q1/2027) - Drive Application Bulder: not planned, will be transferred to the Classic lifecycle phase end of Q3/2026 - Virtual Drive: Version 1.5.1 - Virtual DrivePlus: Version 1.70 (expected by Q4/2026)

  • BehobenVirtual Drive Plusabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at earliest convenience. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - Automation Builder: Version 2.10.0 (expected by Q1/2027) - Drive Application Bulder: not planned, will be transferred to the Classic lifecycle phase end of Q3/2026 - Virtual Drive: Version 1.5.1 - Virtual DrivePlus: Version 1.70 (expected by Q4/2026)

  • BehobenAC 800PECabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at their earliest convenience and install the version compatible with their operating system. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html. An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - AC 800PEC: Version 5.4.5.2 - AC 800PEC ARM: Version 3.0.0.0 (Expected by Q1 2027) - AC 800PEC Tool: Not planned, in classic lifecycle phase - AC 800PEC Tool Cheetah: Version 3.0.0.0 (Expected by Q1 2027) - Control Terminal (xCT): Not planned, in classic lifecycle phase

  • BehobenAC 800PEC ARMabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at their earliest convenience and install the version compatible with their operating system. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html. An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - AC 800PEC: Version 5.4.5.2 - AC 800PEC ARM: Version 3.0.0.0 (Expected by Q1 2027) - AC 800PEC Tool: Not planned, in classic lifecycle phase - AC 800PEC Tool Cheetah: Version 3.0.0.0 (Expected by Q1 2027) - Control Terminal (xCT): Not planned, in classic lifecycle phase

  • BehobenAC 800PEC Toolabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at their earliest convenience and install the version compatible with their operating system. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html. An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - AC 800PEC: Version 5.4.5.2 - AC 800PEC ARM: Version 3.0.0.0 (Expected by Q1 2027) - AC 800PEC Tool: Not planned, in classic lifecycle phase - AC 800PEC Tool Cheetah: Version 3.0.0.0 (Expected by Q1 2027) - Control Terminal (xCT): Not planned, in classic lifecycle phase

  • BehobenAC 800PEC Tool Cheetahabb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at their earliest convenience and install the version compatible with their operating system. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html. An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - AC 800PEC: Version 5.4.5.2 - AC 800PEC ARM: Version 3.0.0.0 (Expected by Q1 2027) - AC 800PEC Tool: Not planned, in classic lifecycle phase - AC 800PEC Tool Cheetah: Version 3.0.0.0 (Expected by Q1 2027) - Control Terminal (xCT): Not planned, in classic lifecycle phase

  • BehobenControl Terminal (xCT)abb_psirt

    The problem is corrected by Wibu in the following product versions: - CodeMeter Runtime 8.41a - CodeMeter Runtime 9.10 ABB recommends that customers apply the update at their earliest convenience and install the version compatible with their operating system. Both versions are available for download from the Wibu download site and can be updated independent of the tool installation: https://www.wibu.com/support/user/user-software.html. An updated version of CodeMeter Runtime containing the fixes will be integrated into the following tool versions: - AC 800PEC: Version 5.4.5.2 - AC 800PEC ARM: Version 3.0.0.0 (Expected by Q1 2027) - AC 800PEC Tool: Not planned, in classic lifecycle phase - AC 800PEC Tool Cheetah: Version 3.0.0.0 (Expected by Q1 2027) - Control Terminal (xCT): Not planned, in classic lifecycle phase

  • Behobentrumpf_psirt

    An updated Wibu Codemeter Runtime is available for download. If your installation is affected, the easiest fix is to install the latest Runtime from https://www.wibu.com/support/user/user-software.html

  • BehobenCODE-LOCsick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenLiDAR-LOCsick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G00 with Image Version 1.0.0.2 and Image ID 38sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G00 with Image Version 1.0.0.7 and Image ID 30sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G03 with Image Version 1.0.0.1 and Image ID 41sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G03 with Image Version 1.0.0.2 and Image ID 36sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G50 with Image Version 1.0.0.1 and Image ID 45sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU0G50 with Image Version 1.0.0.2 and Image ID 38sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU3F00 with Image Version 1.0.0.0 and Image ID 27sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU3F00 with Image Version 1.0.0.0 and Image ID 46sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU4600 with Image Version 1.1.0.1 and Image ID 18sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU8G00 with Image Version 1.0.0.11 and Image ID 15sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU8G00 with Image Version 1.0.0.2 and Image ID 44sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU8G20 with Image Version 1.0.0.2 and Image ID 29sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK APU8G20 with Image Version 1.0.0.2 and Image ID 32sick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSICK PLB with all firmware versionssick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSafety Designersick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • BehobenSentio Composesick_psirt

    Users are recommended to upgrade to version 2.1.0.

  • BehobenSentio Creatorsick_psirt

    Users are recommended to upgrade to version 2026.3.

  • BehobenStream Editorsick_psirt

    Customers are strongy recommended to update the Codemeter Runtime to the latest version (>= 9.10). The software can be downloaded directly on the Wibu Systems website: https://www.wibu.com/de/support/anwendersoftware/anwendersoftware.html

  • MitigationWIBU-Systems CodeMeter Runtime <8.41a installed with ABB AbilityTM zenon <=14abb_psirt

    ABB recommends the following mitigation measures: - Update the WIBU-Systems CodeMeter Runtime to version 8.41a or later. - The latest CodeMeter Runtime software is available from the WIBU-Systems download page: User Software - Wibu-Systems, please see the References section for the corresponding link. - Where upgrading is not feasible, ABB recommends that asset owners perform a risk assessment and implement compensating controls such as network isolation, access restrictions, and enhanced monitoring of affected systems. ABB recommends that customers apply the update at earliest convenience. The vulnerabilities associated with CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576 are exploitable only when the WIBU-Systems CodeMeter Runtime is configured as a network server, which is not the de-fault configuration. The CVE-2026-81572 vulnerability requires local access to the affected Windows system and execution by a low-privileged user. Consequently, systems with restricted local access, proper privilege management, and limited network exposure are less likely to be successfully compromised. Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAutomation Builderabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationDrive Application Bulderabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationVirtual Driveabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationVirtual Drive Plusabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAC 800PECabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAC 800PEC ARMabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAC 800PEC Toolabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAC 800PEC Tool Cheetahabb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationControl Terminal (xCT)abb_psirt

    Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • WorkaroundAutomation Builderabb_psirt

    For CVE-2026-81572 the exposure can be limited by auditing the list of local users and removing any unnecessary accounts. For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundDrive Application Bulderabb_psirt

    For CVE-2026-81572 the exposure can be limited by auditing the list of local users and removing any unnecessary accounts. For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundVirtual Driveabb_psirt

    For CVE-2026-81572 the exposure can be limited by auditing the list of local users and removing any unnecessary accounts. For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundVirtual Drive Plusabb_psirt

    For CVE-2026-81572 the exposure can be limited by auditing the list of local users and removing any unnecessary accounts. For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundAC 800PECabb_psirt

    For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundAC 800PEC ARMabb_psirt

    For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundAC 800PEC Toolabb_psirt

    For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundAC 800PEC Tool Cheetahabb_psirt

    For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

  • WorkaroundControl Terminal (xCT)abb_psirt

    For CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, and CVE-2026-81576: If you enabled the network server functionality at some point but no longer need it, disable it: - Open the Registry Editor and navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ WIBUSYSTEMS\CodeMeter\Server\CurrentVersion\, then change the value of IsNetworkServerfrom 1 to 0. - Restart CodeMeter.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.2
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · SICK PSIRT DE
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/RC:Csecondary · ABB PSIRT
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · TRUMPF PSIRT
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-284USCWE-59USCWE-59USCWE-59USCWE-59USCWE-59US
05

betroffene Produkte (161)

Betroffene Produkte und Versionsbereiche.

20 von 161 angezeigt
06

Advisories (7)

Hersteller- und Ökosystem-Meldungen dazu.

  • 2NGA003144ABB AbilityTM zenon Security Risk Due to High-Severity Vulnerabilities in WIBU CodeMeter Runtime2026-09-09csaf · abb_psirtCH

    ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used within affected ABB zenon Software Platform installations for software licensing and license server functionality. Successful exploitation of the reported vulnerabilities could enable local privilege escalation on Windows systems and impact systems configured as CodeMeter license servers, potentially leading to unauthorized access, service disruption, or loss of system integrity. Refer to the WIBU-Systems advisory for detailed technical information on each vulnerability. Please see the References section for the WIBU-Systems security advisory.

  • 3ADR011572Automation Builder, Drive Application Builder, Virtual Drive, Virtual DrivePlus Impacted by multiple vulnerabilities in Wibu CodeMeter2026-09-03csaf · abb_psirtCH

    An update is available that resolves publicly reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - allow arbitrary files to be deleted with system privileges (CVE-2026-81572), - read potentially sensitive configuration data and overwrite selected values in Server.ini (CVE-2026-81573), - crash CodeMeter and disclose sensitive information such as process memory and stack canaries (CVE-2026-81574), - crash CodeMeter (CVE-2026-81575), or - read potentially sensitive license information (CVE-2026-81576)

  • 3BHS973333AC 800PEC, AC 800PEC ARM, AC 800PEC Tool, Control Terminal (xCT) and AC 800PEC Tool Cheetah Impacted by multiple vulnerabilities in Wibu CodeMeter2026-09-10csaf · abb_psirtCH

    An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - Allow arbitrary files to be deleted with system privileges (CVE-2026-81572), - Read potentially sensitive configuration data and overwrite selected values in Server.ini (CVE-2026-81573) - Crash CodeMeter and disclose sensitive information such as process memory and stack canar-ies (CVE-2026-81574) - Crash CodeMeter (CVE-2026-81575), or - Read potentially sensitive license information (CVE-2026-81576)

  • NCSC-2026-0333Kwetsbaarheden verholpen in CodeMeter Runtime van Wibu-SystemsNL2026-08-28csaf · ncsc_nlNL

    Wibu-Systems heeft meerdere kwetsbaarheden verholpen in CodeMeter Runtime.

  • VDE-2026-091TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities2026-09-15csaf · trumpf_psirtDE

    The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowing privilege escalation.

  • WID-SEC-W-2026-3004Wibu-Systems CodeMeter Runtime: Mehrere SchwachstellenDeutsch2026-08-25csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Wibu-Systems CodeMeter Runtime ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Berechtigungen zu erweitern und Administratorrechte zu erlangen oder Denial-of-Service-Zustände herbeizuführen.

  • sca-2026-0011Vulnerabilities in Wibu Systems CodeMeter Runtime Affect Multiple SICK Products2026-09-04csaf · sick_psirtDE

    Several vulnerabilities in the Wibu Systems CodeMeter Runtime affect the SICK products Sentio Creator, Sentio Compose, Safety Designer, Stream Editor, CODE-LOC, LiDAR-LOC, PLB, SIM1200-2A1A130 LiDAR-LOC and multiple SICK Industrial PCs (APU0G00, APU0G50, APU0G03, APU3F00, APU4600, APU8G00 and APU8G20), which ship with CodeMeter Runtime as part of their preinstalled image. For Sentio Compose, Safety Designer, Stream Editor and PLB, only CVE-2026-81572 is relevant. Vulnerabilities requiring the CodeMeter Runtime to be configured as a server are not applicable to default Sentio Compose, Safety Designer, Stream Editor and PLB installations, as the runtime is shipped with the Network Server and CmWAN Server functionalities disabled. Customers who have modified the default configuration and enabled CodeMeter server functionality should review the remaining vulnerabilities for potential impact. The vulnerabilities could potentially affect the integrity, confidentiality, and availability of the affected products.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

abb_psirtcert_bundncsc_nlsick_psirttrumpf_psirtNVDCVE.orgMITRE
veröffentlicht 2026-08-27geändert 2026-09-01
08

Referenzen (2) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan