CODESYS Gateway vulnerabilities (CVE)

CVE records published for CODESYS Gateway, newest first. Follow to get an email when a new one appears.

1 results
7.5High
CVE-2026-76992

Uncontrolled Memory Allocation in CODESYS Gateway Client

CODESYS Development System 3; CODESYS Gateway; CODESYS Edge Gateway for Windows; CODESYS HMI (SL)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory cons…