CVE-2026-3509

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Mar 24, 2026
Source updated: Mar 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

CODESYS Control Audit Log Format String DoS

An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CODESYS Control RTE (SL)

Vendor: CODESYS
Product: CODESYS Control RTE (SL)
Platforms: Unknown
Default status: unaffected

CODESYS Control RTE (SL) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.17.0	`affected`	semver	3.5.22.0	Unavailable	None listed

CODESYS Control RTE (for Beckhoff CX) SL

Vendor: CODESYS
Product: CODESYS Control RTE (for Beckhoff CX) SL
Platforms: Unknown
Default status: unaffected

CODESYS Control RTE (for Beckhoff CX) SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.17.0	`affected`	semver	3.5.22.0	Unavailable	None listed

CODESYS Control Win (SL)

Vendor: CODESYS
Product: CODESYS Control Win (SL)
Platforms: Unknown
Default status: unaffected

CODESYS Control Win (SL) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.17.0	`affected`	semver	3.5.22.0	Unavailable	None listed

CODESYS Runtime Toolkit

Vendor: CODESYS
Product: CODESYS Runtime Toolkit
Platforms: Unknown
Default status: unaffected

CODESYS Runtime Toolkit · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.17.0	`affected`	semver	3.5.22.0	Unavailable	None listed

CODESYS Control for BeagleBone SL

Vendor: CODESYS
Product: CODESYS Control for BeagleBone SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for BeagleBone SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for emPC-A/iMX6 SL

Vendor: CODESYS
Product: CODESYS Control for emPC-A/iMX6 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for emPC-A/iMX6 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for IOT2000 SL

Vendor: CODESYS
Product: CODESYS Control for IOT2000 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for IOT2000 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for Linux ARM SL

Vendor: CODESYS
Product: CODESYS Control for Linux ARM SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Linux ARM SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for Linux SL

Vendor: CODESYS
Product: CODESYS Control for Linux SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Linux SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for PFC100 SL

Vendor: CODESYS
Product: CODESYS Control for PFC100 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PFC100 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for PFC200 SL

Vendor: CODESYS
Product: CODESYS Control for PFC200 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PFC200 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for PLCnext SL

Vendor: CODESYS
Product: CODESYS Control for PLCnext SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PLCnext SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for Raspberry Pi SL

Vendor: CODESYS
Product: CODESYS Control for Raspberry Pi SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Raspberry Pi SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Control for WAGO Touch Panels 600 SL

Vendor: CODESYS
Product: CODESYS Control for WAGO Touch Panels 600 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for WAGO Touch Panels 600 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed

CODESYS Virtual Control SL

Vendor: CODESYS
Product: CODESYS Virtual Control SL
Platforms: Unknown
Default status: unaffected

CODESYS Virtual Control SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.0.0	`affected`	semver	4.21.0.0	Unavailable	None listed