Search vulnerabilities

Results 3

Export CSV
CVE-2026-76992

Uncontrolled Memory Allocation in CODESYS Gateway Client

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-8047

Out-of-bounds Write in CODESYS Control

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors