6.9Medium
CVE-2026-0393CODESYS Visualization - Insufficiently Protected Credentials
Description
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.
Weakness (CWE):
CWE-522
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| CODESYS | Visualization | 1.0.0.0 – < 4.10.0.0 |
References and patches
- https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-07_vde-2026-052.json vendor-advisoryVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:codesys:visualization:*:*:*:*:*:*:*:*≥ 1.0.0.0 < 4.10.0.0