https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:56:55.293876+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/advisory2026-01_vde-2026-012 Advisory2026-01_VDE-2026-012 — CODESYS Installer - Possible Privilege Escalation 2026-10-02T14:56:55.297002+00:00

The CODESYS Installer is affected by a privilege escalation vulnerability. Due to a race condition, a local attacker with limited privileges can replace the verified downloaded setup before execution. Because the update process runs with administrator privileges, a malicious application can be executed with elevated rights. The attack requires the legitimate user to confirm the self‑update prompt for the CODESYS Installer itself or to initiate an installation of a CODESYS Development System. The update process for CODESYS Add-Ons is not affected by this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-275267 EUVD-2026-275267 2026-10-02T14:56:55.297049+00:00 EUVD-2026-275267 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2364 fkie_cve-2026-2364 2026-10-02T14:56:55.297065+00:00

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer.

 https://cve.radiocsirt.org/vuln/ghsa-wjf9-5g6m-rgcr GHSA-wjf9-5g6m-rgcr 2026-10-02T14:56:55.297087+00:00

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0640 WID-SEC-W-2026-0640 — CODESYS Installer: Schwachstelle ermöglicht Privilegieneskalation 2026-10-02T14:56:55.297101+00:00

Ein lokaler Angreifer kann eine Schwachstelle in CODESYS Installer ausnutzen, um seine Privilegien zu erhöhen.