https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:27:24.200594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-26256 EUVD-2026-26256 2026-10-02T12:27:24.208812+00:00 EUVD-2026-26256 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29239 fkie_cve-2021-29239 2026-10-02T12:27:24.208849+00:00

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T12:27:24.208881+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-65fv-prgh-wg7w GHSA-65fv-prgh-wg7w 2026-10-02T12:27:24.208939+00:00

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity.

 https://cve.radiocsirt.org/vuln/gsd-2021-29239 gsd-2021-29239 2026-10-02T12:27:24.208955+00:00 gsd-2021-29239 https://cve.radiocsirt.org/vuln/icsa-26-076-01 ICSA-26-076-01 — CODESYS in Festo Automation Suite 2026-10-02T12:27:24.208967+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/vde-2021-061 VDE-2021-061 — Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities 2026-10-02T12:27:24.209025+00:00

The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.