Codesys - vulnerabilities (CVEs)
158 CVEs in 145 products, 2 in the last 30 days, newest from 2026-09-30.
Products
- Control For Iot2000 Sl - 54 CVEs
- Control For Linux Sl - 54 CVEs
- Control For Pfc200 Sl - 54 CVEs
- Control For Pfc100 Sl - 53 CVEs
- Control For Raspberry Pi Sl - 53 CVEs
- Control For Beaglebone Sl - 52 CVEs
- Control Runtime System Toolkit - 52 CVEs
- Control For Empc-a/imx6 Sl - 51 CVEs
- Codesys Control For Beaglebone Sl - 48 CVEs
- Codesys Control For Empc-aimx6 Sl - 48 CVEs
- Codesys Control For Iot2000 Sl - 48 CVEs
- Codesys Control For Linux Sl - 48 CVEs
- Codesys Control For Pfc100 Sl - 48 CVEs
- Codesys Control For Pfc200 Sl - 48 CVEs
- Codesys Control For Raspberry Pi Sl - 48 CVEs
- Codesys Control For Wago Touch Panels 600 Sl - 48 CVEs
- Codesys Control For Plcnext Sl - 47 CVEs
- Codesys Control Win Sl - 47 CVEs
- Codesys Control Rte For Beckhoff Cx Sl - 46 CVEs
- Codesys Control Rte Sl - 46 CVEs
- Codesys Hmi Sl - 45 CVEs
- Control For Wago Touch Panels 600 Sl - 45 CVEs
- Control For Plcnext Sl - 44 CVEs
- Development System - 44 CVEs
- Codesys Control Runtime System Toolkit - 40 CVEs
- Codesys Development System V3 - 40 CVEs
- Control Win Sl - 32 CVEs
- Codesys Safety Sil2 Runtime Toolkit - 31 CVEs
- Control Rte Sl - 31 CVEs
- Hmi - 30 CVEs
- Control Rte Sl (for Beckhoff Cx) - 28 CVEs
- Runtime Toolkit - 25 CVEs
- Development System V3 - 20 CVEs
- Safety Sil2 - 20 CVEs
- Control Rte (for Beckhoff Cx) Sl - 19 CVEs
- Gateway - 19 CVEs
- Control Rte (sl) - 18 CVEs
- Control Win (sl) - 18 CVEs
- Hmi (sl) - 18 CVEs
- Embedded Target Visu Toolkit - 17 CVEs
- Plcwinnt - 17 CVEs
- Remote Target Visu Toolkit - 17 CVEs
- Codesys Safety Sil2 Psp - 16 CVEs
- Safety Sil2 Psp - 16 CVEs
- Safety Sil2 Runtime Toolkit - 16 CVEs
- Control For Empc-a/imx6 - 15 CVEs
- Hmi Sl - 15 CVEs
- Control For Beaglebone - 14 CVEs
- Control Rte - 14 CVEs
- Control Win - 14 CVEs
- Codesys - 13 CVEs
- Control For Iot2000 - 12 CVEs
- Control For Pfc100 - 12 CVEs
- Control For Pfc200 - 12 CVEs
- Control For Raspberry Pi - 12 CVEs
- Edge Gateway - 9 CVEs
- Codesys Control For Beckhoff Cx9020 Sl - 8 CVEs
- Codesys Control For Linux Arm Sl - 8 CVEs
- Codesys Edge Gateway For Windows - 8 CVEs
- Codesys Embedded Target Visu Toolkit - 8 CVEs
- Codesys Remote Target Visu Toolkit - 8 CVEs
- Codesys Runtime Toolkit - 8 CVEs
- Control For Plcnext - 8 CVEs
- Codesys Edge Gateway For Linux - 7 CVEs
- Codesys Gateway - 7 CVEs
- Codesys V2 - 7 CVEs
- Control For Linux - 7 CVEs
- Codesys Development System - 6 CVEs
- Codesys Virtual Control Sl - 6 CVEs
- Control For Beckhoff Cx9020 - 6 CVEs
- Simulation Runtime - 6 CVEs
- V2 Web Server - 6 CVEs
- Control For Empc-aimx6 Sl - 5 CVEs
- Control For Linux Arm Sl - 5 CVEs
- Control Runtime Toolkit - 5 CVEs
- Control Rte For Beckhoff Cx Sl - 4 CVEs
- Virtual Control Sl - 4 CVEs
- Codesys Gateway Server V2 - 3 CVEs
- Codesys Plchandler - 3 CVEs
- Control For Wago Touch Panels 600 - 3 CVEs
- Linux - 3 CVEs
- Opc Server - 3 CVEs
- Plchandler - 3 CVEs
- Runtime System Toolkit - 3 CVEs
- Visualization - 3 CVEs
- Web Server - 3 CVEs
- Codesys Control For Empc A Imx6 Sl - 2 CVEs
- Codesys Development System V2.3 - 2 CVEs
- Codesys Gateway For Windows - 2 CVEs
- Codesys Opc Da Server Sl - 2 CVEs
- Codesys Plcwinnt - 2 CVEs
- Codesys Remote Target Visu - 2 CVEs
- Codesys Runtime Toolkit 32 Bit Full - 2 CVEs
- Codesys Visualization - 2 CVEs
- Control - 2 CVEs
- Control V3 Runtime System Toolkit - 2 CVEs
- Sp Realtime Nt - 2 CVEs
- 3s-smart Codesys Gateway Server - 1 CVEs
- Automation Server - 1 CVEs
- Codesys Development System 3 - 1 CVEs
- Codesys Edge Gateway - 1 CVEs
- Codesys Ethernetip - 1 CVEs
- Codesys Gateway Client - 1 CVEs
- Codesys Gateway Server - 1 CVEs
- Codesys Git - 1 CVEs
- Codesys Installer - 1 CVEs
- Codesys Modbus - 1 CVEs
- Codesys Opc Da Server - 1 CVEs
- Codesys Profinet - 1 CVEs
- Codesys Runtime Toolkit For Linux Or Qnx - 1 CVEs
- Codesys Scripting - 1 CVEs
- Codesys Sp Realtime Nt - 1 CVEs
- Codesys Targetvisu For Linux Sl - 1 CVEs
- Codesys V3 Containing The Cmpusermgr - 1 CVEs
- Codesys Virtual Control Sl - 1 CVEs
- Codesys Web Server - 1 CVEs
- Control For Empc-aimx6 - 1 CVEs
- Control Rte V3 - 1 CVEs
- Control Rte V3 All Variants - 1 CVEs
- Control Win V3 - 1 CVEs
- Control Win V3 All Variants - 1 CVEs
- Development System 3 - 1 CVEs
- Eni Server - 1 CVEs
- Ethernetip - 1 CVEs
- Git - 1 CVEs
- Hmi V3 - 1 CVEs
- Hmi V3 All Variants - 1 CVEs
- Opc Da Server - 1 CVEs
- Oscat Basic Library - 1 CVEs
- Profinet - 1 CVEs
- Raspberry Pi - 1 CVEs
- Remote Target Visu - 1 CVEs
- Runtime - 1 CVEs
- Runtime Plcwinnt - 1 CVEs
- Runtime Toolkit 32 Bit Embedded - 1 CVEs
- Runtime Toolkit 32 Bit Full - 1 CVEs
- Safety Sil - 1 CVEs
- Scripting - 1 CVEs
- Targetvisu Sl - 1 CVEs
- V2 Runtime System Sp - 1 CVEs
- V3 Embedded Target Visu Toolkit - 1 CVEs
- V3 Remote Target Visu All Variants - 1 CVEs
- V3 Remote Target Visu Toolkit - 1 CVEs
- V3 Simulation Runtime - 1 CVEs
- V3 Simulation Runtime Part Of The Codesys Development System - 1 CVEs
Newest CVEs of Codesys
- CVE-2026-76992 - CVSS 8.7 (high), 2026-09-30: The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated…
- CVE-2026-79625 - CVSS 8.1 (high), 2026-09-30: Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to…
- CVE-2026-35226 - CVSS 7.1 (high), 2026-07-29: An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed…
- CVE-2026-8047 - CVSS 8.7 (high), 2026-05-26: The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An…
- CVE-2026-44469 - CVSS 8.5 (high), 2026-05-26: The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A…
- CVE-2026-8046 - CVSS 8.1 (high), 2026-05-26: The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this…
- CVE-2026-44468 - CVSS 8.5 (high), 2026-05-26: The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to…
- CVE-2026-0393 - CVSS 6.9 (medium), 2026-05-21: The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient…
- CVE-2026-35227 - CVSS 8.2 (high), 2026-05-12: An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling…
- CVE-2026-35225 - CVSS 8.7 (high), 2026-04-23: An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients…
- CVE-2026-3509 - CVSS 7.5 (high), 2026-03-24: An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system,…
- CVE-2025-41660 - CVSS 8.8 (high), 2026-03-24: A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.
- CVE-2026-2364 - CVSS 7.3 (high), 2026-03-10: If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain…
- CVE-2025-41738 - CVSS 7.5 (high), 2025-12-01: An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type,…
- CVE-2025-41739 - CVSS 5.9 (medium), 2025-12-01: An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux…
- CVE-2025-41700 - CVSS 7.8 (high), 2025-12-01: An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS…
- CVE-2017-20211 - CVSS 8.6 (high), 2025-11-12: UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This…
- CVE-2025-41691 - CVSS 7.5 (high), 2025-08-04: An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted…
- CVE-2025-41659 - CVSS 8.3 (high), 2025-08-04: A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This…
- CVE-2025-41658 - CVSS 5.5 (medium), 2025-08-04: CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.
- CVE-2025-2595 - CVSS 5.3 (medium), 2025-04-23: An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means…
- CVE-2024-41975 - CVSS 5.3 (medium), 2025-03-18: An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
- CVE-2025-0694 - CVSS 6.6 (medium), 2025-03-18: Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.
- CVE-2025-1468 - CVSS 7.5 (high), 2025-03-18: An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the…
- CVE-2024-8175 - CVSS 7.5 (high), 2024-09-25: An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
- CVE-2024-6876 - CVSS 4.4 (medium), 2024-09-10: Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a…
- CVE-2023-5751 - CVSS 7.8 (high), 2024-06-04: A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of…
- CVE-2024-5000 - CVSS 7.5 (high), 2024-06-04: An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to…
- CVE-2024-30164 - CVSS 6.7 (medium), 2024-05-28: Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is…
- CVE-2023-49676 - CVSS 5.5 (medium), 2024-05-06: An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.
