CODESYS Development System 3 güvenlik açıkları (CVE)

CODESYS Development System 3 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
7.5Yüksek
CVE-2026-76992

Uncontrolled Memory Allocation in CODESYS Gateway Client

CODESYS Development System 3; CODESYS Gateway; CODESYS Edge Gateway for Windows; CODESYS HMI (SL)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory cons…

8.1Yüksek
CVE-2026-79625

Improper Synchronization in Monitoring in CODESYS Control Runtime

CODESYS Control RTE (SL); CODESYS Control RTE (for Beckhoff CX) SL; CODESYS Control Win (SL); CODESYS Runtime Toolkit

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacke…