CODESYS Control und Development System: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CODESYS Control und Development System ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service zu verursachen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2025-27003 linked CVEs
Open advisory with all CVEs
More on Development
Other advisories
- MediumCVE-2026-115522Google Agent Development Kit (ADK) for Python: Ressource im falschen Zugriffsbereich
- MediumCVE-2026-115522Google Agent Development Kit (ADK) for Python: Ressource im falschen Zugriffsbereich
- HighCVE-2026-107858Google Agent Development Kit (ADK) for Java: Sicherheitslücke
- HighCVE-2026-107858Google Agent Development Kit (ADK) for Java: Sicherheitslücke
- Not ratedosv:CVE-2026-107858Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server
- MediumCVE-2026-91413Oracle Siebel CRM Development: Sicherheitslücke
- HighCVE-2026-101495Oracle Siebel CRM Development: Sicherheitslücke
- MediumCVE-2026-101456Oracle Siebel CRM Development: Sicherheitslücke
Other news entries
- Warp discloses breach exposing AI agent logs, user telemetry dataNewsBleepingComputer
- Indurex Raises $8 Million to Expand Industrial Cybersecurity PlatformNewsSecurityWeek
- Zeabur shutting down after second security breach in two monthsNewsBleepingComputer
- Close Identity Gaps in Software Development Before Unleashing AINewsDark Reading
- Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers sayNewsCSO Online
- How Claude Code’s 256KB blind spot put developers’ secrets in the preview paneNewsCSO Online
- Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing WormNewsThe Hacker News
- Nikkei breach: stolen credentials expose 1.83M personal-information records from a development cloudBreachpwn.watch
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2700
ID