https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 08:57:01 +0000 https://cve.radiocsirt.org/vuln/advisory2025-03_vde-2025-015 <p>A low privileged attacker with physical access to a controller, that supports removable media and is running a CODESYS Control runtime system, can exploit the insufficient path validation by connecting removable media with a file system supporting symbolic links. This could allow the attacker to bypass SysFile restrictions and gain unauthorized access to the entire file system.</p> <p>A low privileged attacker with physical access to a controller, that supports removable media and is running a CODESYS Control runtime system, can exploit the insufficient path validation by connecting removable media with a file system supporting symbolic links. This could allow the attacker to bypass SysFile restrictions and gain unauthorized access to the entire file system.</p> https://cve.radiocsirt.org/vuln/advisory2025-03_vde-2025-015 https://cve.radiocsirt.org/vuln/euvd-2026-223161 EUVD-2026-223161 https://cve.radiocsirt.org/vuln/euvd-2026-223161 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0694 <p>Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.</p> <p>Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-0694 https://cve.radiocsirt.org/vuln/fsa-202601 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/fsa-202601 https://cve.radiocsirt.org/vuln/ghsa-g55g-4c57-8ccx <p>Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.</p> <p>Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.</p> https://cve.radiocsirt.org/vuln/ghsa-g55g-4c57-8ccx https://cve.radiocsirt.org/vuln/icsa-26-076-01 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/icsa-26-076-01 https://cve.radiocsirt.org/vuln/vde-2025-062 <p>Several WAGO firmwares installed on different devices are impacted by various CODESYS vulnerabilities. These affect the runtime, visualization, and OPC UA server.</p> <p>Several WAGO firmwares installed on different devices are impacted by various CODESYS vulnerabilities. These affect the runtime, visualization, and OPC UA server.</p> https://cve.radiocsirt.org/vuln/vde-2025-062 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0582 <p>Ein lokaler Angreifer kann eine Schwachstelle in CODESYS Control ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in CODESYS Control ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0582