https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:13:55.443563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03593 bdu:2023-03593 2026-10-02T14:13:55.526991+00:00 bdu:2023-03593 https://cve.radiocsirt.org/vuln/euvd-2026-59574 EUVD-2026-59574 2026-10-02T14:13:55.527025+00:00 EUVD-2026-59574 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19789 fkie_cve-2019-19789 2026-10-02T14:13:55.527040+00:00

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T14:13:55.527069+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-9crr-pwpm-h268 GHSA-9crr-pwpm-h268 2026-10-02T14:13:55.527158+00:00

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/gsd-2019-19789 gsd-2019-19789 2026-10-02T14:13:55.527174+00:00 gsd-2019-19789 https://cve.radiocsirt.org/vuln/icsa-26-076-01 ICSA-26-076-01 — CODESYS in Festo Automation Suite 2026-10-02T14:13:55.527186+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/vde-2021-054 VDE-2021-054 — Pilz: Multiple vulnerabilities in CODESYS V2 and V3 runtime system 2026-10-02T14:13:55.527259+00:00

Several Pilz products use Versions V2 and V3 of the CODESYS runtime system from CODESYS GmbH, which enables the execution of IEC 61131-3 PLC programs. These runtime environments contain several vulnerabilities, which an attacker can exploit via the network. Successful exploitation of the vulnerabilities results in reduced availability and, in a worst case, to the insertion of program code.