https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:21:10.253912+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/3adr011377 3ADR011377 — AC500 V3 Multiple vulnerabilities 2026-10-04T09:21:10.372788+00:00

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357), crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to files (CVE-2024-12429) or enable command execution (CVE-2024-12430). The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.

 https://cve.radiocsirt.org/vuln/euvd-2026-7676 EUVD-2026-7676 2026-10-04T09:21:10.372848+00:00 EUVD-2026-7676 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6357 fkie_cve-2023-6357 2026-10-04T09:21:10.372865+00:00

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-04T09:21:10.372890+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-2fx7-mf6r-pff9 GHSA-2fx7-mf6r-pff9 2026-10-04T09:21:10.372989+00:00

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

 https://cve.radiocsirt.org/vuln/gsd-2023-6357 gsd-2023-6357 2026-10-04T09:21:10.373005+00:00 gsd-2023-6357 https://cve.radiocsirt.org/vuln/icsa-26-076-01 ICSA-26-076-01 — CODESYS in Festo Automation Suite 2026-10-04T09:21:10.373017+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/vde-2023-066 VDE-2023-066 — CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products 2026-10-04T09:21:10.373111+00:00

UPDATE 29.02.2024: Removed "This version is planned for January 2024." from Solution as the updated version is released.On CODESYS Control runtimes running on Linux or QNX operating systems, successfully authenticated PLC programmers can utilize SysFile or CAA-File system libraries to inject calls to additional shell functions.

 https://cve.radiocsirt.org/vuln/vde-2025-008 VDE-2025-008 — WAGO: Vulnerabilities in CODESYS Control 2026-10-04T09:21:10.373130+00:00

The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0943 WID-SEC-W-2024-0943 — CODESYS: Mehrere Schwachstellen 2026-10-04T09:21:10.373146+00:00

Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder einen Brute-Force-Angriff durchzuführen.