Codesys
Codesys Control Runtime System: vulnerabilities and CVEs
Codesys Control Runtime System has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs2
Last 12 months2
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-41660 | High (8.8) | 0.43% | — | Mar 24, 2026 | A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution. |
| CVE-2025-41739 | Medium (5.9) | 0.35% | — | Dec 1, 2025 | An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket… |
Other products by Codesys
Control FOR Pfc100 SL · 52Control FOR Linux SL · 52Control FOR Pfc200 SL · 52Control FOR Iot2000 SL · 52Control Runtime System Toolkit · 52Control FOR Raspberry PI SL · 51Control FOR Beaglebone SL · 50Control FOR Empc-a/imx6 SL · 49Development System · 44Control FOR Wago Touch Panels 600 SL · 43Control FOR Plcnext SL · 42Control RTE SL · 30