Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-76992

Uncontrolled Memory Allocation in CODESYS Gateway Client

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Codesys Development System 3 Codesys Edge Gateway For Linux Codesys Edge Gateway For Windows and 12 more
CVE-2026-44468

Incorrect Default Permissions in CODESYS Development System

The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary components.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Codesys Development System Development System
CVE-2026-44469

Incorrect Default Permissions in CODESYS Development System

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before installation, resulting in local privilege escalation.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Codesys Development System Development System