Codesys Control For Plcnext Sl CVEs and Security Vulnerabilities

CVE-2026-8047

Out-of-bounds Write in CODESYS Control

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Codesys

Products

Codesys Control For Beaglebone Sl Codesys Control For Empc A Imx6 Sl Codesys Control For Iot2000 Sl and 29 more

CVE-2026-8046

Incorrect Authorization in CODESYS Control

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed