CODESYS vulnerabilities
104 published CVEs name CODESYS among the affected products.
- Published CVEs
- 104
- Last 12 months
- 16
- Critical
- 3
- Known exploited
- 0
Critical 3High 64Medium 36Low 1Not scored 0
CVEs per yearBy the year they were published
- 20151
- 20218
- 20221
- 202344
- 20231
- 202423
- 202510
- 20254
- 202612
Newest CVEs
- CVE-2026-76992
Uncontrolled Memory Allocation in CODESYS Gateway Client
CODESYS · Development System 3
High8.7 - CVE-2026-79625
Improper Synchronization in Monitoring in CODESYS Control Runtime
CODESYS · Control RTE (SL)
High7.2 - CVE-2026-35226
Out-of-bounds Write in CODESYS PROFINET Controller
CODESYS · CODESYS PROFINET
High7.1 - CVE-2026-8047
Out-of-bounds Write in CODESYS Control
CODESYS · CODESYS Control RTE (SL)
High8.7 - CVE-2026-8046
Incorrect Authorization in CODESYS Control
CODESYS · CODESYS Control RTE (SL)
High7.2 - CVE-2026-44469
Incorrect Default Permissions in CODESYS Development System
CODESYS · CODESYS Development System
High8.5 - CVE-2026-44468
Incorrect Default Permissions in CODESYS Development System
CODESYS · CODESYS Development System
High8.5 - CVE-2026-0393
CODESYS Visualization - Insufficiently Protected Credentials
CODESYS · Visualization
Medium6.9 - CVE-2026-35227
Improper resource management in CODESYS Modbus TCP Server
CODESYS · CODESYS Modbus
High8.2 - CVE-2026-35225
Improper timeout handling in CODESYS EtherNetIP
CODESYS · CODESYS EtherNetIP
High8.7
Products with the most CVEs
- CODESYS Control for BeagleBone SL50
- CODESYS Control for IOT2000 SL50
- CODESYS Control for Linux SL50
- CODESYS Control for PFC100 SL50
- CODESYS Control for PFC200 SL50
- CODESYS Control for Raspberry Pi SL50
- CODESYS Control for WAGO Touch Panels 600 SL50
- CODESYS Control for emPC-A/iMX6 SL50
- CODESYS Control Win (SL)49
- CODESYS Control for PLCnext SL49
Most common weaknesses
- CWE-20 Improper input validation16
- CWE-787 Out-of-bounds write16
- CWE-119 Memory buffer bounds error5
- CWE-125 Out-of-bounds read5
- CWE-276 Incorrect default permissions4
- CWE-1188 3
- CWE-126 3
- CWE-400 Uncontrolled resource consumption3
- CWE-476 NULL pointer dereference3
- CWE-668 Exposure of a resource to the wrong sphere3