https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:58:25.830774+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03150 bdu:2021-03150 2026-10-02T12:58:25.910633+00:00 bdu:2021-03150 https://cve.radiocsirt.org/vuln/cnvd-2021-37670 cnvd-2021-37670 2026-10-02T12:58:25.910674+00:00 cnvd-2021-37670 https://cve.radiocsirt.org/vuln/euvd-2026-26722 EUVD-2026-26722 2026-10-02T12:58:25.910690+00:00 EUVD-2026-26722 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30192 fkie_cve-2021-30192 2026-10-02T12:58:25.910703+00:00

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.

 https://cve.radiocsirt.org/vuln/ghsa-m8j4-8jwg-mc3j GHSA-m8j4-8jwg-mc3j 2026-10-02T12:58:25.910734+00:00

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.

 https://cve.radiocsirt.org/vuln/gsd-2021-30192 gsd-2021-30192 2026-10-02T12:58:25.910750+00:00 gsd-2021-30192 https://cve.radiocsirt.org/vuln/icsa-21-173-02 ICSA-21-173-02 — CODESYS V2 web server 2026-10-02T12:58:25.910761+00:00

Crafted web server requests may cause a stack-based buffer overflow. This could allow an attacker to execute arbitrary code on the CODESYS web server or trigger a denial-of-service condition due to a crash in the CODESYS web server.CVE-2021-30189 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The user management of the CODESYS v2.3 WebVisu allows user dependent control of access to the visualization pages. However, subordinate requests to read or write values are forwarded to the CODESYS Control runtime system regardless of successful authentication. This enables crafted web server requests to bypass user management and read or write values on the PLC without authentication.CVE-2021-30190 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Crafted web server requests can cause an over-read or over-write of a buffer in the CODESYS web server, which typically leads to a denial-of-service condition.CVE-2021-30191 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Crafted web server requests can bypass the security checks for boot project-related files on the CODESYS Control runtime system and be uploaded from the CODESYS Control runtime system.CVE-2021-30192 has been a…

 https://cve.radiocsirt.org/vuln/vde-2021-014 VDE-2021-014 — WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 2026-10-02T12:58:25.910798+00:00

Multiple vulnerabilities were reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLC's.