https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:38:30.629096+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04478 bdu:2023-04478 2026-10-02T13:38:30.646341+00:00 bdu:2023-04478 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0632 certfr-2023-avi-0632 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-02T13:38:30.646397+00:00 certfr-2023-avi-0632 https://cve.radiocsirt.org/vuln/euvd-2026-219800 EUVD-2026-219800 2026-10-02T13:38:30.646417+00:00 EUVD-2026-219800 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3663 fkie_cve-2023-3663 2026-10-02T13:38:30.646430+00:00

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T13:38:30.646460+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-c86m-wfx2-qmx9 GHSA-c86m-wfx2-qmx9 2026-10-02T13:38:30.646553+00:00

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.

 https://cve.radiocsirt.org/vuln/gsd-2023-3663 gsd-2023-3663 2026-10-02T13:38:30.646569+00:00 gsd-2023-3663 https://cve.radiocsirt.org/vuln/icsa-23-236-05 ICSA-23-236-05 — CODESYS Development System 2026-10-02T13:38:30.646580+00:00

In CODESYS Development System versions from 3.5.11.0 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.

 https://cve.radiocsirt.org/vuln/sevd-2023-192-04 SEVD-2023-192-04 — CODESYS Runtime Vulnerabilities 2026-10-02T13:38:30.646596+00:00

Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some cases, in remote code execution on PacDrive controllers, Modicon Controllers M241 / M251 / M262 / M258 / LMC058 / LMC078 / M218 , HMISCU, the Simulation Runtime SoftSPS from EcoStruxure Machine Expert and EcoStruxure Microgrid Operation products. Failure to apply the mitigations provided below may result in denial of service and/or arbitrary remote code execution.

 https://cve.radiocsirt.org/vuln/vde-2023-022 VDE-2023-022 — CODESYS: Missing integrity check in CODESYS Development System 2026-10-02T13:38:30.646636+00:00

The Notification Center of the CODESYS Development System receives messages without ensuring that the message was not modified during transmission. This finally enables MITMs code execution when the user clicks the "Learn More" button.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0943 WID-SEC-W-2024-0943 — CODESYS: Mehrere Schwachstellen 2026-10-02T13:38:30.646652+00:00

Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder einen Brute-Force-Angriff durchzuführen.