Description
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.
Published: 2026-09-30
Score: 7.2 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
First Time appeared Codesys
Codesys control For Beaglebone Sl
Codesys control For Empc-a/imx6 Sl
Codesys control For Iot2000 Sl
Codesys control For Linux Arm Sl
Codesys control For Linux Sl
Codesys control For Pfc100 Sl
Codesys control For Pfc200 Sl
Codesys control For Plcnext Sl
Codesys control For Raspberry Pi Sl
Codesys control For Wago Touch Panels 600 Sl
Codesys control Rte (for Beckhoff Cx) Sl
Codesys control Rte (sl)
Codesys control Win (sl)
Codesys development System V3
Codesys hmi (sl)
Codesys runtime Toolkit
Codesys safety Sil2
Codesys virtual Control Sl
Vendors & Products Codesys
Codesys control For Beaglebone Sl
Codesys control For Empc-a/imx6 Sl
Codesys control For Iot2000 Sl
Codesys control For Linux Arm Sl
Codesys control For Linux Sl
Codesys control For Pfc100 Sl
Codesys control For Pfc200 Sl
Codesys control For Plcnext Sl
Codesys control For Raspberry Pi Sl
Codesys control For Wago Touch Panels 600 Sl
Codesys control Rte (for Beckhoff Cx) Sl
Codesys control Rte (sl)
Codesys control Win (sl)
Codesys development System V3
Codesys hmi (sl)
Codesys runtime Toolkit
Codesys safety Sil2
Codesys virtual Control Sl

Wed, 30 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Description Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.
Title Improper Synchronization in Monitoring in CODESYS Control Runtime
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'}

cvssV4_0

{'score': 7.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}


Subscriptions

Codesys Control For Beaglebone Sl Control For Empc-a/imx6 Sl Control For Iot2000 Sl Control For Linux Arm Sl Control For Linux Sl Control For Pfc100 Sl Control For Pfc200 Sl Control For Plcnext Sl Control For Raspberry Pi Sl Control For Wago Touch Panels 600 Sl Control Rte (for Beckhoff Cx) Sl Control Rte (sl) Control Win (sl) Development System V3 Hmi (sl) Runtime Toolkit Safety Sil2 Virtual Control Sl
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-09-30T09:23:16.775Z

Reserved: 2026-08-25T08:46:38.207Z

Link: CVE-2026-79625

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-30T10:17:17.273

Modified: 2026-09-30T10:17:17.273

Link: CVE-2026-79625

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T12:00:16Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')