CVE-2026-8047 - Out-of-bounds Write in CODESYS Control

Back Back to CVE browser

HIGH

Out-of-bounds Write in CODESYS Control

Published May 26, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.57%

Description

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

Affected products

Vendor Codesys Product CODESYS Control RTE (SL) Default
unaffected
Affected
- ≥ 3.5.21.0, < 3.5.22.20
Vendor Codesys Product CODESYS Control RTE (for Beckhoff CX) SL Default
unaffected
Affected
- ≥ 3.5.21.0, < 3.5.22.20
Vendor Codesys Product CODESYS Control Win (SL) Default
unaffected
Affected
- ≥ 3.5.21.0, < 3.5.22.20
Vendor Codesys Product CODESYS Control for BeagleBone SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for IOT2000 SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for Linux ARM SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for Linux SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for PFC100 SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for PFC200 SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for PLCnext SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for Raspberry Pi SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for WAGO Touch Panels 600 SL Default
unaffected
Affected
- ≥ 0.0.0, < 4.21.0.0
Vendor Codesys Product CODESYS Control for emPC-A/iMX6 SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0
Vendor Codesys Product Codesys Hmi (sl) Default
unaffected
Affected
- ≥ 3.5.21.0, < 3.5.22.20
Vendor Codesys Product CODESYS Runtime Toolkit Default
unaffected
Affected
- ≥ 3.5.21.0, < 3.5.22.20
Vendor Codesys Product CODESYS Virtual Control SL Default
unaffected
Affected
- ≥ 4.15.0.0, < 4.21.0.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Codesys	CODESYS Control RTE (SL)	unaffected	Affected ≥ 3.5.21.0, < 3.5.22.20
Codesys	CODESYS Control RTE (for Beckhoff CX) SL	unaffected	Affected ≥ 3.5.21.0, < 3.5.22.20
Codesys	CODESYS Control Win (SL)	unaffected	Affected ≥ 3.5.21.0, < 3.5.22.20
Codesys	CODESYS Control for BeagleBone SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for IOT2000 SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for Linux ARM SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for Linux SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for PFC100 SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for PFC200 SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for PLCnext SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for Raspberry Pi SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	CODESYS Control for WAGO Touch Panels 600 SL	unaffected	Affected ≥ 0.0.0, < 4.21.0.0
Codesys	CODESYS Control for emPC-A/iMX6 SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0
Codesys	Codesys Hmi (sl)	unaffected	Affected ≥ 3.5.21.0, < 3.5.22.20
Codesys	CODESYS Runtime Toolkit	unaffected	Affected ≥ 3.5.21.0, < 3.5.22.20
Codesys	CODESYS Virtual Control SL	unaffected	Affected ≥ 4.15.0.0, < 4.21.0.0