Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2026-8047— Out-of-bounds Write in CODESYS Control

CVSS 7.5 · High EPSS 0.09% · P25

Possible ATT&CK Techniques 1AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 16

VendorProductVersion RangeStatus
CODESYSCODESYS Control for BeagleBone SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for emPC-A/iMX6 SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for IOT2000 SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for Linux ARM SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for Linux SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for PFC100 SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for PFC200 SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for PLCnext SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for Raspberry Pi SL4.15.0.0< 4.21.0.0affected
CODESYSCODESYS Control for WAGO Touch Panels 600 SL0.0.0< 4.21.0.0affected
CODESYSCODESYS Control RTE (for Beckhoff CX) SL3.5.21.0< 3.5.22.20affected
CODESYSCODESYS Control RTE (SL)3.5.21.0< 3.5.22.20affected
CODESYSCODESYS Control Win (SL)3.5.21.0< 3.5.22.20affected
CODESYSCODESYS HMI (SL)3.5.21.0< 3.5.22.20affected
CODESYSCODESYS Runtime Toolkit3.5.21.0< 3.5.22.20affected
CODESYSCODESYS Virtual Control SL4.15.0.0< 4.21.0.0affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-8047

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Out-of-bounds Write in CODESYS Control
Source: NVD (National Vulnerability Database)
Vulnerability Description
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1284
Source: NVD (National Vulnerability Database)
Vulnerability Title
CODESYS多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CODESYS Control等都是德国CODESYS公司的产品。CODESYS Control是一套工业控制程序编程软件。CODESYS是一个工业控制自动化软件。CODESYS HMI是一个可视化软件。 CODESYS多款产品存在安全漏洞，该漏洞源于解析传入HTTP请求时长度检查不当，导致大小有限的越界写入，可能导致未经身份验证的远程攻击者通过系统崩溃造成拒绝服务。以下产品受到影响：CODESYS Control RTE (SL)、CODESYS Control RTE (for Beckhoff CX
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
CODESYSCODESYS Control RTE (SL) 3.5.21.0 ~ 3.5.22.20 -
CODESYSCODESYS Control RTE (for Beckhoff CX) SL 3.5.21.0 ~ 3.5.22.20 -
CODESYSCODESYS Control Win (SL) 3.5.21.0 ~ 3.5.22.20 -
CODESYSCODESYS HMI (SL) 3.5.21.0 ~ 3.5.22.20 -
CODESYSCODESYS Runtime Toolkit 3.5.21.0 ~ 3.5.22.20 -
CODESYSCODESYS Control for BeagleBone SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for emPC-A/iMX6 SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for IOT2000 SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for Linux ARM SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for Linux SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for PFC100 SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for PFC200 SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for PLCnext SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for Raspberry Pi SL 4.15.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Control for WAGO Touch Panels 600 SL 0.0.0 ~ 4.21.0.0 -
CODESYSCODESYS Virtual Control SL 4.15.0.0 ~ 4.21.0.0 -

II. Public POCs for CVE-2026-8047

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-8047

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-8047 (1)

Same Patch Batch · CODESYS · 2026-05-26 · 4 CVEs total

CVE-2026-80468.1 HIGHIncorrect Authorization in CODESYS Control
CVE-2026-444697.8 HIGHIncorrect Default Permissions in CODESYS Development System
CVE-2026-444687.8 HIGHIncorrect Default Permissions in CODESYS Development System

IV. Related Vulnerabilities

Same product: CODESYS Control RTE (SL)
Same vendor: CODESYS
Same weakness: CWE-1284

V. Comments for CVE-2026-8047

No comments yet

Leave a comment