https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:55:38 +0000 https://cve.radiocsirt.org/vuln/advisory2026-10_vde-2026-057 <p>The CmpWebServer component in the CODESYS Control Runtime allows users to create browser-based visualizations for monitoring and controlling industrial processes. Due to improper bounds checking, a specially crafted HTTP request from an unauthenticated remote attacker may lead to a size-limited out-of-bounds write, causing a denial of service of the affected device.</p> <p>The CODESYS Control runtime system is only affected if the web server is active, which by default requires a running application with an enabled Web Visualization.</p> <p>The CmpWebServer component in the CODESYS Control Runtime allows users to create browser-based visualizations for monitoring and controlling industrial processes. Due to improper bounds checking, a specially crafted HTTP request from an unauthenticated remote attacker may lead to a size-limited out-of-bounds write, causing a denial of service of the affected device.</p> <p>The CODESYS Control runtime system is only affected if the web server is active, which by default requires a running application with an enabled Web Visualization.</p> https://cve.radiocsirt.org/vuln/advisory2026-10_vde-2026-057 https://cve.radiocsirt.org/vuln/euvd-2026-321193 EUVD-2026-321193 https://cve.radiocsirt.org/vuln/euvd-2026-321193 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8047 <p>The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.</p> <p>The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8047 https://cve.radiocsirt.org/vuln/ghsa-x9mr-w23g-rxq7 <p>The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.</p> <p>The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-x9mr-w23g-rxq7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1675 <p>Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um seine Privilegien zu erhöhen, um Daten zu manipulieren, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um seine Privilegien zu erhöhen, um Daten zu manipulieren, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1675