CODESYS vulnerabilities

CVEs per yearBy the year they were published

1. 20151
2. 20218
3. 202226
4. 202340
5. 20246
6. 202510
7. 202613

Newest CVEs

• CVE-2026-76992

  Uncontrolled Memory Allocation in CODESYS Gateway Client

  CODESYS · Development System 3

  High8.7
• CVE-2026-79625

  Improper Synchronization in Monitoring in CODESYS Control Runtime

  CODESYS · Control RTE (SL)

  High7.2
• CVE-2026-35226

  Out-of-bounds Write in CODESYS PROFINET Controller

  CODESYS · CODESYS PROFINET

  High7.1
• CVE-2026-8047

  Out-of-bounds Write in CODESYS Control

  CODESYS · CODESYS Control RTE (SL)

  High8.7
• CVE-2026-8046

  Incorrect Authorization in CODESYS Control

  CODESYS · CODESYS Control RTE (SL)

  High7.2
• CVE-2026-44469

  Incorrect Default Permissions in CODESYS Development System

  CODESYS · CODESYS Development System

  High8.5
• CVE-2026-44468

  Incorrect Default Permissions in CODESYS Development System

  CODESYS · CODESYS Development System

  High8.5
• CVE-2026-0393

  CODESYS Visualization - Insufficiently Protected Credentials

  CODESYS · Visualization

  Medium6.9
• CVE-2026-35227

  Improper resource management in CODESYS Modbus TCP Server

  CODESYS · CODESYS Modbus

  High8.2
• CVE-2026-35225

  Improper timeout handling in CODESYS EtherNetIP

  CODESYS · CODESYS EtherNetIP

  High8.7