Codesys Development System 3 vulnerabilities

2 CVEs affecting Codesys Development System 3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76992, published 2026-09-30.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-76992, published 2026-09-30. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious…
• CVE-2026-79625, published 2026-09-30. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of…