Login Request a demo
CO
Vendor
CODESYS
110 products with CVEs on record
1,365
CVEs
0
On KEV
26
New 30D
Products
HS
HMI (SL)
CODESYS
9.8
36 CVEs0 on KEV2 new
RT
Runtime Toolkit
CODESYS
9.8
28 CVEs0 on KEV2 new
CF
Control for IOT2000 SL
CODESYS
9.8
57 CVEs0 on KEV1 new
CF
Control for Linux SL
CODESYS
9.8
57 CVEs0 on KEV1 new
CF
Control for PFC200 SL
CODESYS
9.8
57 CVEs0 on KEV1 new
CF
Control for BeagleBone SL
CODESYS
9.8
56 CVEs0 on KEV1 new
CF
Control for PFC100 SL
CODESYS
9.8
56 CVEs0 on KEV1 new
CF
Control for Raspberry Pi SL
CODESYS
9.8
56 CVEs0 on KEV1 new
CF
Control for emPC-A/iMX6 SL
CODESYS
9.8
54 CVEs0 on KEV1 new
CW
Control Win (SL)
CODESYS
9.8
52 CVEs0 on KEV1 new
CR
Control RTE (SL)
CODESYS
9.8
51 CVEs0 on KEV1 new
GA
Gateway
CODESYS
9.8
20 CVEs0 on KEV1 new
DS
Development System 3
CODESYS
8.1
2 CVEs0 on KEV2 new
CF
Control for WAGO Touch Panels 600 SL
CODESYS
8.8
48 CVEs0 on KEV1 new
CF
Control for PLCnext SL
CODESYS
8.8
47 CVEs0 on KEV1 new
CR
Control RTE (for Beckhoff CX) SL
CODESYS
8.8
22 CVEs0 on KEV1 new
SS
Safety SIL2
CODESYS
8.8
21 CVEs0 on KEV1 new
CF
Control for Linux ARM SL
CODESYS
8.8
8 CVEs0 on KEV1 new
VC
Virtual Control SL
CODESYS
8.3
6 CVEs0 on KEV1 new
PL
PLCHandler
CODESYS
7.5
4 CVEs0 on KEV1 new
EG
Edge Gateway for Linux
CODESYS
7.5
1 CVEs0 on KEV1 new
EG
Edge Gateway for Windows
CODESYS
7.5
1 CVEs0 on KEV1 new
OD
OPC DA Server SL
CODESYS
7.5
1 CVEs0 on KEV1 new
CR
Control Runtime System Toolkit
Codesys
9.8
52 CVEs0 on KEV0 new
DS
Development System
Codesys
9.8
44 CVEs0 on KEV0 new
HM
Hmi
Codesys
9.8
30 CVEs0 on KEV0 new
CR
Control Rte SL (for Beckhoff Cx)
Codesys
8.8
28 CVEs0 on KEV0 new
DS
Development System V3
Codesys
9.8
20 CVEs0 on KEV0 new
PL
Plcwinnt
Codesys
9.8
17 CVEs0 on KEV0 new
ET
Embedded Target Visu Toolkit
Codesys
9.8
16 CVEs0 on KEV0 new
RT
Remote Target Visu Toolkit
Codesys
9.8
16 CVEs0 on KEV0 new
SS
Safety Sil2 Psp
Codesys
8.8
16 CVEs0 on KEV0 new
SS
Safety Sil2 Runtime Toolkit
Codesys
8.8
16 CVEs0 on KEV0 new
CF
Control For Empc-a/imx6
Codesys
9.8
15 CVEs0 on KEV0 new
CF
Control For Beaglebone
Codesys
9.8
14 CVEs0 on KEV0 new
CR
Control Rte
Codesys
9.8
14 CVEs0 on KEV0 new
CW
Control Win
Codesys
9.8
14 CVEs0 on KEV0 new
CO
Codesys
Codesys
9.8
13 CVEs0 on KEV0 new
CF
Control For Iot2000
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Pfc100
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Pfc200
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Raspberry PI
Codesys
9.8
12 CVEs0 on KEV0 new
CR
CODESYS Runtime Toolkit
CODESYS
8.8
10 CVEs0 on KEV0 new
CC
CODESYS Control for BeagleBone SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for emPC-A/iMX6 SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for IOT2000 SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for Linux ARM SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for Linux SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for PFC100 SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for PFC200 SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for PLCnext SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for Raspberry Pi SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control for WAGO Touch Panels 600 SL
CODESYS
8.8
9 CVEs0 on KEV0 new
CC
CODESYS Control Win (SL)
CODESYS
8.8
9 CVEs0 on KEV0 new
EG
Edge Gateway
Codesys
7.8
9 CVEs0 on KEV0 new
CC
CODESYS Control RTE (for Beckhoff CX) SL
CODESYS
8.8
8 CVEs0 on KEV0 new
CC
CODESYS Control RTE (SL)
CODESYS
8.8
8 CVEs0 on KEV0 new
CV
CODESYS Virtual Control SL
CODESYS
8.8
8 CVEs0 on KEV0 new
CF
Control For Plcnext
Codesys
9.8
8 CVEs0 on KEV0 new
CH
CODESYS HMI (SL)
CODESYS
8.8
7 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-76992
DS
Development System 3
CODESYS
7.5
0%
Sep 30Uncontrolled Memory Allocation in CODESYS Gateway Client
CVE-2026-79625
RT
Runtime Toolkit
CODESYS
8.1
0%
Sep 30Improper Synchronization in Monitoring in CODESYS Control Runtime
CVE-2026-35226
CP
CODESYS PROFINET
CODESYS
6.5
0%
Jul 29Out-of-bounds Write in CODESYS PROFINET Controller
CVE-2026-8047
CC
CODESYS Control Win (SL)
CODESYS
7.5
0%
May 26Out-of-bounds Write in CODESYS Control
CVE-2026-8046
CC
CODESYS Control for PLCnext SL
CODESYS
8.1
0%
May 26Incorrect Authorization in CODESYS Control
CVE-2026-44469
CD
CODESYS Development System
CODESYS
7.0
0%
May 26Incorrect Default Permissions in CODESYS Development System
CVE-2026-44468
CD
CODESYS Development System
CODESYS
7.8
0%
May 26Incorrect Default Permissions in CODESYS Development System
CVE-2026-0393
VI
Visualization
CODESYS
6.5
0%
May 21CODESYS Visualization - Insufficiently Protected Credentials
CVE-2026-35227
CM
CODESYS Modbus
CODESYS
8.2
0%
May 12Improper resource management in CODESYS Modbus TCP Server
CVE-2026-35225
CE
CODESYS EtherNetIP
CODESYS
8.7
0%
Apr 23Improper timeout handling in CODESYS EtherNetIP
CVE-2026-3509
CC
CODESYS Control for emPC-A/iMX6 SL
CODESYS
7.5
0%
Mar 24CODESYS Control Audit Log Format String DoS
CVE-2025-41660
CC
CODESYS Control for Linux SL
CODESYS
8.8
0%
Mar 24CODESYS Control Boot Application Replacement Enables Code Execution
CVE-2026-2364
CI
CODESYS Installer
CODESYS
7.3
0%
Mar 10CODESYS Installer TOCTOU Privilege Escalation
CVE-2025-41700
CD
CODESYS Development System
CODESYS
7.8
0%
Dec 1CODESYS Development System - Deserialization of Untrusted Data
CVE-2025-41738
CC
CODESYS Control for WAGO Touch Panels 600 SL
CODESYS
7.5
0%
Dec 1CODESYS Control - Invalid type usage in visualization
CVE-2025-41739
CC
CODESYS Control for PFC200 SL
CODESYS
5.9
0%
Dec 1CODESYS Control - Linux/QNX SysSocket flaw
CVE-2025-41691
CF
Control for PFC200 SL
CODESYS
7.5
1%
Aug 4CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
CVE-2025-41659
CW
Control Win (SL)
CODESYS
8.3
0%
Aug 4CODESYS Control PKI Exposure Enables Remote Certificate Access
CVE-2025-41658
CF
Control for Raspberry Pi SL
CODESYS
5.5
0%
Aug 4CODESYS Toolkit Exposes Sensitive Files via Default Permissions
CVE-2025-2595
CV
CODESYS Visualization
CODESYS
5.3
0%
Apr 23Forced Browsing Vulnerability in CODESYS Visualization
CVE-2024-41975
CE
CODESYS Edge Gateway
CODESYS
5.3
0%
Mar 18CODESYS (Edge) Gateway for Windows insecure default
CVE-2025-0694
CC
CODESYS Control for IOT2000 SL
CODESYS
6.6
0%
Mar 18CODESYS Control V3 removable media path traversal
CVE-2025-1468
CR
CODESYS Runtime Toolkit
CODESYS
7.5
1%
Mar 18CODESYS Control V3 - OPC UA Server Authentication bypass
CVE-2024-8175
CC
CODESYS Control for Raspberry Pi SL
CODESYS
7.5
1%
Sep 25CODESYS: web server vulnerable to DoS
CVE-2024-6876
OB
OSCAT Basic Library
CODESYS
4.4
0%
Sep 10Out-of-bounds read in OSCAT-Library
CVE-2023-5751
CG
CODESYS Gateway for Windows
CODESYS
7.8
0%
Jun 4CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
CVE-2024-5000
CC
CODESYS Control for IOT2000 SL
CODESYS
7.5
1%
Jun 4CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
CVE-2024-30164
LI
Linux
Codesys
6.7
0%
May 28Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions
CVE-2023-49676
CD
CODESYS Development System V2.3
CODESYS
5.5
0%
May 6CODESYS: Use after free vulnerability through corrupted project files
CVE-2023-49675
CD
CODESYS Development System V2.3
CODESYS
7.8
0%
May 6CODESYS: Out-of-bounds write through corrupted project files
CVE-2023-6357
CF
Control For Plcnext SL
Codesys
8.8
1%
Dec 5A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the…
CVE-2022-4046
CR
Control Runtime System Toolkit
Codesys
8.8
1%
Aug 3In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access…
CVE-2023-3669
DS
Development System
Codesys
3.3
0%
Aug 3A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import…
CVE-2023-37559
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37558
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37557
CF
Control For Linux SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to…
CVE-2023-37556
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37555
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37554
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37553
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37552
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37551
CF
Control For Beaglebone SL
Codesys
6.5
0%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to…
CVE-2023-37550
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37549
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37548
CF
Control For Empc-a/imx6 SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37547
CF
Control For Linux SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37546
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-3663
DS
Development System
Codesys
8.8
1%
Aug 3In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of…
CVE-2023-3662
DS
Development System
Codesys
7.3
0%
Aug 3In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users…
CVE-2023-37545
CF
Control For Iot2000 SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-3670
DS
Development System
Codesys
7.3
0%
Jul 28In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the…
CVE-2022-47393
CR
Control Runtime System Toolkit
Codesys
6.5
1%
May 15An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products…
CVE-2022-47392
CW
Control Win (sl)
Codesys
6.5
1%
May 15An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions…
CVE-2022-4048
DS
Development System V3
Codesys
7.7
0%
May 15Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the…
CVE-2022-47391
HS
Hmi (sl)
Codesys
7.5
2%
May 15In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a…
CVE-2022-47390
SS
Safety Sil2 Runtime Toolkit
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47389
CR
Control Rte (sl)
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47388
CF
Control For Beaglebone SL
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47387
CR
Control Runtime System Toolkit
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47386
HS
Hmi (sl)
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…