Codesys Development System 3 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Codesys Development System 3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-76992codesysdevelopment system 3+7
EPSS score0.33%
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.CVE-2026-79625codesyscontrol_for_beaglebone_sl+17EPSS score0.23%
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.