Vulnerabilities of CODESYS CODESYS Virtual Control SL

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-8047	The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a…	8.7 High	May 26, 2026
CVE-2026-8046	The affected products insufficiently verify authorization when deleting user accounts	7.2 High	May 26, 2026
CVE-2026-3509	An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of…	7.5 High	Mar 24, 2026
CVE-2025-41660	A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system,…	8.8 High	Mar 24, 2026
CVE-2025-41738	An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access…	7.5 High	Dec 1, 2025
CVE-2025-41739	An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the…	5.9 Medium	Dec 1, 2025
CVE-2025-0694	Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full…	6.6 Medium	Mar 18, 2025
CVE-2024-8175	An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS	7.5 High	Sep 25, 2024