Search vulnerabilities

Results 2

Export CSV
CVE-2026-79625

Improper Synchronization in Monitoring in CODESYS Control Runtime

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-8047

Out-of-bounds Write in CODESYS Control

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors