CVE-2025-41726: Beckhoff Automation Beckhoff.device.manager.xar

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.

Affected products

• Beckhoff Automation Beckhoff.device.manager.xar: from 0.0.0, before 2.5.3 (fixed in 2.5.3)
• Beckhoff Automation Mdp For Beckhoff Rt Linuxr: from 0.0.0, before 0.0.5 (fixed in 0.0.5)
• Beckhoff Automation Mdp Software Package For Twincat/bsd: from 0.0.0, before 1.7.0.0 (fixed in 1.7.0.0)

Published 2026-01-27. Last modified 2026-06-17.