7.5
High
CVE-2025-1468 An unauthenticated remote attacker can gain access to sensitive information including authentication information when…
Description
An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Runtime Toolkit 3.5 | earliest → < 3.5.21.0 | 3.5.21.0 |
Other CVEs of CODESYS Runtime Toolkit
The 10 CVEs of CODESYS Runtime Toolkit →
CVE-2026-8047
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a…
8.7
High
CVE-2026-8046
The affected products insufficiently verify authorization when deleting user accounts
7.2
High
CVE-2026-3509
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of…
7.5
High
CVE-2025-41660
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system,…
8.8
High