CVE-2021-29238: Codesys Automation Server

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF).

Affected products

• Codesys Automation Server: before 1.16.0 (fixed in 1.16.0)

Published 2021-05-03. Last modified 2026-06-17.