Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL and 13 more products 3.5.22.0, 4.21.0.0 Clear all filters
TI-2026-03023 CVE-2026-3509 · GHSA-34rr-qp2j-p4q7

CODESYS Control Audit Log Format String DoS

Priority LOW 39

An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0036 Published 2026-03-24 Fixed in 3.5.22.0, 4.21.0.0 CWE-134
TI-2025-27626 CVE-2025-41660 · GHSA-25xg-52c8-p9q8

CODESYS Control Boot Application Replacement Enables Code Execution

Priority MEDIUM 40

A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2026-03-24 Fixed in 3.5.22.0, 4.21.0.0 CWE-669