https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:06:08.722062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25048 CVE-2018-25048 — Codesys Runtime Improper Limitation of a Pathname 2026-10-05T20:06:08.737640+00:00

Affected: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control RTE V3 (all variants), CODESYS Control Win V3 (all variants), CODESYS V3 Simulation Runtime (part of the CODESYS Development System), CODESYS HMI V3 (all variants) and 7 more

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.