Known vulnerabilities in CODESYS Runtime Toolkit
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-76992 | The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate… | 8.7 High | Sep 30, 2026 |
| CVE-2026-79625 | Affected products do not properly synchronize access to their monitoring functionality | 7.2 High | Sep 30, 2026 |
| CVE-2025-41659 | A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and… | 8.3 High | Aug 4, 2025 |
| CVE-2025-41658 | CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due… | 5.5 Medium | Aug 4, 2025 |
| CVE-2022-32143 | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory… | 8.8 High | Jun 24, 2022 |
| CVE-2022-32142 | Multiple CODESYS Products are prone to a out-of bounds read or write access | 8.1 High | Jun 24, 2022 |
| CVE-2022-32141 | Multiple CODESYS Products are prone to a buffer over read | 6.5 Medium | Jun 24, 2022 |
| CVE-2022-32140 | Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request,… | 6.5 Medium | Jun 24, 2022 |
| CVE-2022-32139 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read,… | 6.5 Medium | Jun 24, 2022 |
| CVE-2022-32138 | In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension,… | 8.8 High | Jun 24, 2022 |
| CVE-2022-32137 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based… | 8.8 High | Jun 24, 2022 |
| CVE-2022-32136 | In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an… | 6.5 Medium | Jun 24, 2022 |
| CVE-2022-1965 | Multiple products of CODESYS implement a improper error handling | 8.1 High | Jun 24, 2022 |
Other CODESYS products
CODESYS Control for BeagleBone SL 50
CODESYS Control for emPC-A/iMX6 SL 50
CODESYS Control for IOT2000 SL 50
CODESYS Control for Linux SL 50
CODESYS Control for PFC100 SL 50
CODESYS Control for PFC200 SL 50
CODESYS Control for Raspberry Pi SL 50
CODESYS Control for WAGO Touch Panels 600 SL 50
CODESYS Control Win (SL) 49
CODESYS Control for PLCnext SL 49
CODESYS Control RTE (SL) 48
CODESYS Control RTE (for Beckhoff CX) SL 48