Codesys vulnerabilities
104 CVEs and advisories name Codesys as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-76992Uncontrolled Memory Allocation in CODESYS Gateway Client
- CVE-2026-79625Improper Synchronization in Monitoring in CODESYS Control Runtime
- CVE-2026-35226Out-of-bounds Write in CODESYS PROFINET Controller
- CVE-2026-8047Out-of-bounds Write in CODESYS Control
- CVE-2026-8046Incorrect Authorization in CODESYS Control
- CVE-2026-44469Incorrect Default Permissions in CODESYS Development System
- CVE-2026-44468Incorrect Default Permissions in CODESYS Development System
- CVE-2026-0393CODESYS Visualization - Insufficiently Protected Credentials
- CVE-2026-35227Improper resource management in CODESYS Modbus TCP Server
- CVE-2026-35225Improper timeout handling in CODESYS EtherNetIP
- CVE-2026-3509CODESYS Control Audit Log Format String DoS
- CVE-2025-41660CODESYS Control Boot Application Replacement Enables Code Execution
- CVE-2026-2364CODESYS Installer TOCTOU Privilege Escalation
- CVE-2025-41700CODESYS Development System - Deserialization of Untrusted Data
- CVE-2025-41738CODESYS Control - Invalid type usage in visualization
- CVE-2025-41739CODESYS Control - Linux/QNX SysSocket flaw
- CVE-2025-41691CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
- CVE-2025-41659CODESYS Control PKI Exposure Enables Remote Certificate Access
- CVE-2025-41658CODESYS Toolkit Exposes Sensitive Files via Default Permissions
- CVE-2025-2595Forced Browsing Vulnerability in CODESYS Visualization
- CVE-2024-41975CODESYS (Edge) Gateway for Windows insecure default
- CVE-2025-0694CODESYS Control V3 removable media path traversal
- CVE-2025-1468CODESYS Control V3 - OPC UA Server Authentication bypass
- CVE-2024-8175CODESYS: web server vulnerable to DoS
- CVE-2024-6876Out-of-bounds read in OSCAT-Library
- CVE-2023-5751CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
- CVE-2024-5000CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
- CVE-2023-49676CODESYS: Use after free vulnerability through corrupted project files
- CVE-2023-49675CODESYS: Out-of-bounds write through corrupted project files
- CVE-2023-6357OS Command Injection in multiple CODESYS products