Serial number: AV26-983
Date: October 1, 2026
As of September 30, 2026, CODESYS is affected by vulnerabilities in the following products:
- CODESYS Control RTE (SL)
- Prior to 3.5.22.40
- CODESYS Control RTE (for Beckhoff CX) SL
- Prior to 3.5.22.40
- CODESYS Control Win (SL)
- Prior to 3.5.22.40
- CODESYS Control for BeagleBone SL
- Prior to 4.23.0.0
- CODESYS Control for IOT2000 SL
- Prior to 4.23.0.0
- CODESYS Control for Linux ARM SL
- Prior to 4.23.0.0
- CODESYS Control for Linux SL
- Prior to 4.23.0.0
- CODESYS Control for PFC100 SL
- Prior to 4.23.0.0
- CODESYS Control for PFC200 SL
- Prior to 4.23.0.0
- CODESYS Control for PLCnext SL
- Prior to 4.23.0.0
- CODESYS Control for Raspberry Pi SL
- Prior to 4.23.0.0
- CODESYS Control for WAGO Touch Panels 600 SL
- Prior to 4.23.0.0
- CODESYS Control for emPC-A/iMX6 SL
- Prior to 4.23.0.0
- CODESYS Development System 3
- Prior to 3.5.22.40
- CODESYS Edge Gateway for Linux
- Prior to 4.23.0.0
- CODESYS Edge Gateway for Windows
- Prior to 3.5.22.40
- CODESYS Gateway
- Prior to 3.5.22.40
- CODESYS HMI (SL)
- Prior to 3.5.22.40
- CODESYS OPC DA Server SL
- Prior to 3.5.22.40
- CODESYS PLCHandler
- Prior to 3.5.22.40
- CODESYS Runtime Toolkit
- Prior to 3.5.22.40
- CODESYS Safety SIL2
- Prior to 3.5.22.40
- CODESYS Virtual Control SL
- Prior to 4.23.0.0
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.