Known Vulnerabilities for Control Win SL by CODESYS
Listed below are 10 of the newest known vulnerabilities associated with "Control Win SL" by "CODESYS".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103442 json | External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103270 json | LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Una... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103105 json | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103042 json | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mo... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102761 json | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained pack... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102757 json | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in p... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102730 json | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** ... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102727 json | FTP Passive Data Connection Not Bound to the Authenticated Control Peer | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102711 json | Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `_txm_... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102710 json | Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch... | Not Provided | 2026-09-29 | 2026-09-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Codesys | Control Win Sl | 3.5.9.80 | |||
| Application | Codesys | Control Win Sl | 3.5.16.40 | |||
| Application | Codesys | Control Win Sl | 3.5.16.30 | |||
| Application | Codesys | Control Win Sl | 3.5.16.20 | |||
| Application | Codesys | Control Win Sl | 3.5.16.10 | |||
| Application | Codesys | Control Win Sl | 3.5.16.0 | |||
| Application | Codesys | Control Win Sl | 3.5.15.50 | |||
| Application | Codesys | Control Win Sl | 3.5.15.40 | |||
| Application | Codesys | Control Win Sl | 3.5.15.30 | |||
| Application | Codesys | Control Win Sl | 3.5.15.20 | |||
| Application | Codesys | Control Win Sl | 3.5.15.10 | |||
| Application | Codesys | Control Win Sl | 3.5.15.0 | |||
| Application | Codesys | Control Win Sl | 3.5.14.40 | |||
| Application | Codesys | Control Win Sl | 3.5.14.30 | |||
| Application | Codesys | Control Win Sl | 3.5.14.20 | |||
| Application | Codesys | Control Win Sl | 3.5.14.10 | |||
| Application | Codesys | Control Win Sl | 3.5.14.0 | |||
| Application | Codesys | Control Win Sl | 3.5.13.40 | |||
| Application | Codesys | Control Win Sl | 3.5.13.30 | |||
| Application | Codesys | Control Win Sl | 3.5.13.20 |