https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:23:11.749553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221238 EUVD-2026-221238 2026-10-06T01:23:11.753384+00:00 EUVD-2026-221238 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22424 fkie_cve-2023-22424 2026-10-06T01:23:11.753417+00:00

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-82v2-v4p5-fg34 GHSA-82v2-v4p5-fg34 2026-10-06T01:23:11.753449+00:00

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2023-22424 gsd-2023-22424 2026-10-06T01:23:11.753467+00:00 gsd-2023-22424 https://cve.radiocsirt.org/vuln/icsa-23-096-03 ICSA-23-096-03 — JTEKT ELECTRONICS Kostac PLC Programming Software 2026-10-06T01:23:11.753479+00:00

When a specially crafted project file is opened, out-of-bounds read occurs when processing a comment block in stage information because the end of data cannot be verified. CVE-2023-22419 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). When a specially crafted project file is opened, out-of-bounds read occurs because buffer size used by the PLC program instructions is insufficient. CVE-2023-22421 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). When the maximum number of columns to place the PLC program is out of specification by opening a specially crafted project file, a process accesses memory that has already been freed. CVE-2023-22424 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/jvndb-2023-001304 jvndb-2023-001304 2026-10-06T01:23:11.753505+00:00

Kostac PLC Programming Software provided by JTEKT ELECTRONICS CORPORATION contains multiple vulnerabilities listed below. * Out-of-bounds read (CWE-125) - CVE-2023-22419, CVE-2023-22421 * Use-after-free (CWE-416) - CVE-2023-22424 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.