Codesys Runtime Toolkit vulnerabilities
10 vulnerabilities
Known vulnerabilities in Codesys Runtime Toolkit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-1468codesyscodesys runtime toolkit
EPSS score0.64%
An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.CVE-2025-41660codesyscodesys control for beaglebone sl+15EPSS score0.43%
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.CVE-2025-41739codesyscodesys control for beaglebone sl+15EPSS score0.35%
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.CVE-2025-41738codesyscodesys control for beaglebone sl+33EPSS score0.39%
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.CVE-2025-0694codesyscodesys control for beaglebone sl+14EPSS score0.28%
Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.CVE-2024-5000codesyscodesys control for beaglebone sl+14EPSS score0.57%
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.CVE-2024-8175codesyscodesys control for beaglebone sl+17EPSS score0.62%
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.CVE-2026-8046codesyscodesys control for beaglebone sl+15EPSS score0.45%
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.CVE-2026-8047codesyscodesys control for beaglebone sl+15EPSS score0.57%
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.CVE-2026-3509codesyscodesys control for beaglebone sl+14EPSS score0.57%
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.