https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:36:12.187177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02778 bdu:2023-02778 2026-10-02T12:36:12.266732+00:00 bdu:2023-02778 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 certfr-2023-avi-0297 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permetten… 2026-10-02T12:36:12.266788+00:00 certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/euvd-2026-322769 EUVD-2026-322769 2026-10-02T12:36:12.266808+00:00 EUVD-2026-322769 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4224 fkie_cve-2022-4224 2026-10-02T12:36:12.266821+00:00

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

 https://cve.radiocsirt.org/vuln/fsa-202601 FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite 2026-10-02T12:36:12.266851+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/ghsa-p8q2-j5x8-g597 GHSA-p8q2-j5x8-g597 2026-10-02T12:36:12.266946+00:00

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

 https://cve.radiocsirt.org/vuln/gsd-2022-4224 gsd-2022-4224 2026-10-02T12:36:12.266964+00:00 gsd-2022-4224 https://cve.radiocsirt.org/vuln/icsa-26-076-01 ICSA-26-076-01 — CODESYS in Festo Automation Suite 2026-10-02T12:36:12.266993+00:00

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

 https://cve.radiocsirt.org/vuln/sevd-2023-101-01 SEVD-2023-101-01 — CODESYS Runtime Vulnerabilities 2026-10-02T12:36:12.267174+00:00

Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS Runtime. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some cases, in remote code execution on PacDrive controllers, Modicon Controllers M241 / M251 / M262 / M258 / LMC058 / M218 and HMISCU products. Failure to apply the mitigations provided below may risk Logic Integrity and Permissions attacks, which could result in loss of controllers’ integrity. January 2024 Update: A remediation is available for CVE-2022-4224 for Harmony HMISCU Controller, Modicon Controllers M241 / M251 / M262 and PacDrive Controllers LMC Eco/Pro/Pro2.