CVE-2026-79625

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Sep 30, 2026
Source updated: Sep 30, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Improper Synchronization in Monitoring in CODESYS Control Runtime

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Control RTE (SL)

Vendor: CODESYS
Product: Control RTE (SL)
Platforms: Unknown
Default status: unaffected

Control RTE (SL) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Control RTE (for Beckhoff CX) SL

Vendor: CODESYS
Product: Control RTE (for Beckhoff CX) SL
Platforms: Unknown
Default status: unaffected

Control RTE (for Beckhoff CX) SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Control Win (SL)

Vendor: CODESYS
Product: Control Win (SL)
Platforms: Unknown
Default status: unaffected

Control Win (SL) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Runtime Toolkit

Vendor: CODESYS
Product: Runtime Toolkit
Platforms: Unknown
Default status: unaffected

Runtime Toolkit · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Safety SIL2

Vendor: CODESYS
Product: Safety SIL2
Platforms: Unknown
Default status: unaffected

Safety SIL2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

HMI (SL)

Vendor: CODESYS
Product: HMI (SL)
Platforms: Unknown
Default status: unaffected

HMI (SL) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Development System 3

Vendor: CODESYS
Product: Development System 3
Platforms: Unknown
Default status: unaffected

Development System 3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.0	`affected`	semver	3.5.22.40	Unavailable	None listed

Control for BeagleBone SL

Vendor: CODESYS
Product: Control for BeagleBone SL
Platforms: Unknown
Default status: unaffected

Control for BeagleBone SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for emPC-A/iMX6 SL

Vendor: CODESYS
Product: Control for emPC-A/iMX6 SL
Platforms: Unknown
Default status: unaffected

Control for emPC-A/iMX6 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for IOT2000 SL

Vendor: CODESYS
Product: Control for IOT2000 SL
Platforms: Unknown
Default status: unaffected

Control for IOT2000 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for Linux ARM SL

Vendor: CODESYS
Product: Control for Linux ARM SL
Platforms: Unknown
Default status: unaffected

Control for Linux ARM SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for Linux SL

Vendor: CODESYS
Product: Control for Linux SL
Platforms: Unknown
Default status: unaffected

Control for Linux SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for PFC100 SL

Vendor: CODESYS
Product: Control for PFC100 SL
Platforms: Unknown
Default status: unaffected

Control for PFC100 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for PFC200 SL

Vendor: CODESYS
Product: Control for PFC200 SL
Platforms: Unknown
Default status: unaffected

Control for PFC200 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for PLCnext SL

Vendor: CODESYS
Product: Control for PLCnext SL
Platforms: Unknown
Default status: unaffected

Control for PLCnext SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for Raspberry Pi SL

Vendor: CODESYS
Product: Control for Raspberry Pi SL
Platforms: Unknown
Default status: unaffected

Control for Raspberry Pi SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Control for WAGO Touch Panels 600 SL

Vendor: CODESYS
Product: Control for WAGO Touch Panels 600 SL
Platforms: Unknown
Default status: unaffected

Control for WAGO Touch Panels 600 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed

Virtual Control SL

Vendor: CODESYS
Product: Virtual Control SL
Platforms: Unknown
Default status: unaffected

Virtual Control SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.5.0.0	`affected`	semver	4.23.0.0	Unavailable	None listed