PT-2026-42450 · Codesys · Codesys Visualization

Silvan Schweizer · Published 2026-05-21 · Updated 2026-06-01 · CVE-2026-0393

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions CODESYS Visualization (affected versions not specified)

Description Insufficient isolation of authentication data may cause the remote exposure of credentials between low privileged visualization users during concurrent login operations. This issue only affects login operations occurring within an active visualization session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-0393

Affected Products

Codesys Visualization

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0393 · Security Note
• https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-07_vde-2026-052.json · Vendor Advisory
• https://t.me/cveNotify/165456 · Telegram Post
• https://t.me/CVEtracker/54496 · Telegram Post
• https://t.me/cveNotify/164372 · Telegram Post