CODESYS CODESYS Runtime Toolkit
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-8047 | 3.5.21.0 – < 3.5.22.20 | Out-of-bounds Write in CODESYS Control | HIGH 8.7 | 0.4 % | ||
| CVE-2026-8046 | 3.0.0.0 – < 3.5.22.20 | Incorrect Authorization in CODESYS Control | HIGH 7.2 | 0.3 % | ||
| CVE-2026-3509 | 3.5.17.0 – < 3.5.22.0 | CODESYS Control Audit Log Format String DoS | HIGH 7.5 | 0.4 % | ||
| CVE-2025-41660 | 0.0.0 – < 3.5.22.0 | CODESYS Control Boot Application Replacement Enables Code Execution | HIGH 8.8 | 0.4 % | ||
| CVE-2025-41738 | | CODESYS Control - Invalid type usage in visualization | HIGH 7.5 | 0.4 % | ||
| CVE-2025-41739 | 3.5.21.0 – < 3.5.21.40 | CODESYS Control - Linux/QNX SysSocket flaw | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-0694 | | CODESYS Control V3 removable media path traversal | MEDIUM 6.6 | 0.3 % | ||
| CVE-2025-1468 | < 3.5.21.0 | CODESYS Control V3 - OPC UA Server Authentication bypass | HIGH 7.5 | 0.6 % | ||
| CVE-2024-8175 | | CODESYS: web server vulnerable to DoS | HIGH 7.5 | 0.6 % | ||
| CVE-2024-5000 | | CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products | HIGH 7.5 | 0.6 % |