https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:40:31.950460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-10272 EUVD-2026-10272 2026-10-02T11:40:32.000908+00:00 EUVD-2026-10272 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49676 fkie_cve-2023-49676 2026-10-02T11:40:32.000948+00:00

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T11:40:32.000982+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-q4h3-rm8f-c8qr GHSA-q4h3-rm8f-c8qr 2026-10-02T11:40:32.001079+00:00

An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-49676 gsd-2023-49676 2026-10-02T11:40:32.001096+00:00 gsd-2023-49676 https://cve.radiocsirt.org/vuln/icsa-26-076-01 ICSA-26-076-01 — CODESYS in Festo Automation Suite 2026-10-02T11:40:32.001108+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/vde-2024-024 VDE-2024-024 — CODESYS: Development System V2.3 affected by two vulnerabilities through corrupted project files 2026-10-02T11:40:32.001196+00:00

An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability. An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1026 WID-SEC-W-2024-1026 — CODESYS: Mehrere Schwachstellen 2026-10-02T11:40:32.001214+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.