CVE-2026-8046 Incorrect Authorization in CODESYS Control

🗓️ 26 May 2026 06:45:21Reported by CERTVDEType

CVE-2026-8046: CODESYS Control permits an authenticated low-privilege user to delete other user accounts.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-8046	26 May 202606:45	–	attackerkb
Circl	CVE-2026-8046	26 May 202609:49	–	circl
CNNVD	CODESYS多款产品安全漏洞	26 May 202600:00	–	cnnvd
CVE	CVE-2026-8046	26 May 202606:45	–	cve
EUVD	EUVD-2026-31799	26 May 202606:45	–	euvd
NVD	CVE-2026-8046	26 May 202608:16	–	nvd
Positive Technologies	PT-2026-43198	26 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-8046	5 Jun 202619:10	–	redhatcve
Vulnrichment	CVE-2026-8046 Incorrect Authorization in CODESYS Control	26 May 202606:45	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control RTE (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.22.20",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control RTE (for Beckhoff CX) SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.22.20",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control Win (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.22.20",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS HMI (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.22.20",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Runtime Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.22.20",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for BeagleBone SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for emPC-A/iMX6 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for IOT2000 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for Linux ARM SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for Linux SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for PFC100 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for PFC200 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for PLCnext SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for Raspberry Pi SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Control for WAGO Touch Panels 600 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CODESYS Virtual Control SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.21.0.0",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2026-056/

26 May 2026 06:46Current

CVSS 47.2

CVSS 3.18.1

EPSS0.00348

CWE-863