https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:56:14.310460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/advisory2026-04_vde-2026-040 Advisory2026-04_VDE-2026-040 — CODESYS EtherNetIP - Improper timeout handling 2026-10-03T11:56:14.398664+00:00

CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the generated application code. When an EtherNet/IP adapter is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.

Under certain non‑standard operating conditions, the EtherNet/IP adapter fails to perform timeout checks on active TCP connections. As a result, once all available TCP connections are in use, expired connections are not released and no new TCP connections can be established. Existing connections remain unaffected and continue to operate normally.

This issue affects only CODESYS projects that include an EtherNet/IP adapter configuration.

 https://cve.radiocsirt.org/vuln/euvd-2026-292773 EUVD-2026-292773 2026-10-03T11:56:14.398753+00:00 EUVD-2026-292773 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35225 fkie_cve-2026-35225 2026-10-03T11:56:14.398777+00:00

An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.

 https://cve.radiocsirt.org/vuln/ghsa-c7pv-j8xr-mmhj GHSA-c7pv-j8xr-mmhj 2026-10-03T11:56:14.398812+00:00

An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.