PT-2026-65721 · Codesys · Codesys Profinet

CVE-2026-35226 · Publicado 2026-07-29 · Atualizado 2026-07-29

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-35226

Produtos afetados

Codesys Profinet

Referências · 2

• https://certvde.com/en/advisories/VDE-2026-041 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-35226 · Nota de Segurança