https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:40:35.229216+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03149 bdu:2021-03149 2026-10-02T11:40:35.243329+00:00 bdu:2021-03149 https://cve.radiocsirt.org/vuln/cnvd-2021-37675 cnvd-2021-37675 2026-10-02T11:40:35.243370+00:00 cnvd-2021-37675 https://cve.radiocsirt.org/vuln/euvd-2026-26698 EUVD-2026-26698 2026-10-02T11:40:35.243385+00:00 EUVD-2026-26698 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30187 fkie_cve-2021-30187 2026-10-02T11:40:35.243396+00:00

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T11:40:35.243424+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-mrvh-5hf5-fwp3 GHSA-mrvh-5hf5-fwp3 2026-10-02T11:40:35.243495+00:00

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

 https://cve.radiocsirt.org/vuln/gsd-2021-30187 gsd-2021-30187 2026-10-02T11:40:35.243510+00:00 gsd-2021-30187 https://cve.radiocsirt.org/vuln/icsa-21-173-04 ICSA-21-173-04 — CODESYS Control V2 Linux SysFile library 2026-10-02T11:40:35.243520+00:00

The CODESYS Control runtime system enables embedded or PC-based devices to operate as programmable industrial controllers. Control programs can access local or remote input/output (I/O) locations, communication interfaces such as serial ports or sockets, and local system functions such as the file system, real-time clock, and other OS functions. An attacker could exploit this vulnerability to call additional OS functions via the SysFile system library.CVE-2021-30187 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/vde-2021-014 VDE-2021-014 — WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 2026-10-02T11:40:35.243539+00:00

Multiple vulnerabilities were reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLC's.