CVE-2026-76992
Uncontrolled Memory Allocation in CODESYS Gateway Client
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products