PT-2026-27350 · Codesys · Codesys Control Runtime System

Luca Borzacchiello · Published 2026-03-24 · Updated 2026-05-01 · CVE-2025-41660

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CODESYS Control Runtime System (affected versions not specified)

Description A remote attacker with limited privileges may be able to replace the boot application of the CODESYS Control runtime system. Successful exploitation could lead to unauthorized code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-669

Related Identifiers

BDU:2026-04079

CVE-2025-41660

Affected Products

Codesys Control Runtime System

References · 8

• https://bdu.fstec.ru/vul/2026-04079 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-41660 · Security Note
• https://certvde.com/de/advisories/VDE-2026-011 · Note
• https://twitter.com/blackorbird/status/2048422524636242217 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1sxwz73/top_10_trending_cves_28042026 · Reddit Post
• https://twitter.com/DFIR_Radar/status/2050139051555172466 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2036441944138633584 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1swz840/top_10_trending_cves_27042026 · Reddit Post