6.9Mittel
CVE-2026-0393CODESYS Visualization - Insufficiently Protected Credentials
Beschreibung
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.
Schwachstellentyp (CWE):
CWE-522
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| CODESYS | Visualization | 1.0.0.0 – < 4.10.0.0 |
Referenzen und Patches
- https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-07_vde-2026-052.json vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:codesys:visualization:*:*:*:*:*:*:*:*≥ 1.0.0.0 < 4.10.0.0