8.5
High
CVE-2026-44468 The affected product creates a directory with insecure default permissions during administrative installation
Description
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary components.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System 3.0 | 3.0.0.0 → < 3.5.22.20 | 3.5.22.20 |
References
- www.certvde.com www.certvde.com
Timeline
- Published
- Last modified
Other CVEs of CODESYS Development System
The 8 CVEs of CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
High
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
High
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Low
CVE-2023-3662
In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of…
7.3
High