Codesys OPC DA Server SL vulnerabilities

1 vulnerability

Known vulnerabilities in Codesys OPC DA Server SL, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2026-76992codesysdevelopment system 3+7
EPSS score
0.33%
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.