EUVD-2026-31799

🗓️ 26 May 2026 06:45:21Reported by EUVDType

An authenticated, low-privileged remote user can delete other users due to insufficient authorization checks.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-8046	26 May 202606:45	–	attackerkb
Circl	CVE-2026-8046	26 May 202609:49	–	circl
CNNVD	CODESYS多款产品安全漏洞	26 May 202600:00	–	cnnvd
CVE	CVE-2026-8046	26 May 202606:45	–	cve
Cvelist	CVE-2026-8046 Incorrect Authorization in CODESYS Control	26 May 202606:45	–	cvelist
NVD	CVE-2026-8046	26 May 202608:16	–	nvd
Positive Technologies	PT-2026-43198	26 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-8046	5 Jun 202619:10	–	redhatcve
Vulnrichment	CVE-2026-8046 Incorrect Authorization in CODESYS Control	26 May 202606:45	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "d4f598c2-c924-30e0-b9e3-ccaa6a2567f6",
        "vendor": {
          "name": "CODESYS"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3ea23159-a80a-391c-911a-e188e87e6898",
        "product": {
          "name": "CODESYS Control Win (SL)",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <3.5.22.20"
      },
      {
        "id": "4bf30c92-e6f1-31b3-af85-06831e1b4319",
        "product": {
          "name": "CODESYS Control for PLCnext SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "62a440e2-61ce-3985-98fc-53123545f7f4",
        "product": {
          "name": "CODESYS Control for Linux ARM SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "6b85ef6f-1dcb-36e3-b343-93dd38a31db0",
        "product": {
          "name": "CODESYS HMI (SL)",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <3.5.22.20"
      },
      {
        "id": "71149aaf-affe-308b-b520-f319164b2125",
        "product": {
          "name": "CODESYS Virtual Control SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "763f1be9-2f19-303f-b6cd-68c60ced7999",
        "product": {
          "name": "CODESYS Runtime Toolkit",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <3.5.22.20"
      },
      {
        "id": "ae828e7b-9ddd-3b00-b0a6-1fe4ae73fc8e",
        "product": {
          "name": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "af7c4694-c2ad-39a9-98ac-4b856c377bb1",
        "product": {
          "name": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <3.5.22.20"
      },
      {
        "id": "b49d75bb-c03f-3c93-b226-9cff2efb55da",
        "product": {
          "name": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "b8745368-0e94-30e3-bb8d-38932f036d8f",
        "product": {
          "name": "CODESYS Control for BeagleBone SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "c97956f2-2b5c-3970-9c2c-142fe5d9e9a2",
        "product": {
          "name": "CODESYS Control for Raspberry Pi SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "d4b8e602-1193-358a-8427-443ef54e70a5",
        "product": {
          "name": "CODESYS Control RTE (SL)",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <3.5.22.20"
      },
      {
        "id": "ddb74f99-9654-3bd5-bed7-313d7a28353d",
        "product": {
          "name": "CODESYS Control for PFC200 SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "f100c7bd-eea6-33af-8ca7-48ab589fa81e",
        "product": {
          "name": "CODESYS Control for Linux SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "fa7300a5-34b1-3a74-a845-f41ca87541b0",
        "product": {
          "name": "CODESYS Control for IOT2000 SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      },
      {
        "id": "fad451b0-c8ad-3b04-bd9f-f31ef39c90bb",
        "product": {
          "name": "CODESYS Control for PFC100 SL",
          "vendor": {
            "name": "CODESYS"
          }
        },
        "product_version": "3.0.0.0 <4.21.0.0"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2026-056/

26 May 2026 10:48Current

5.8Medium risk

Vulners AI Score5.8

CVSS 47.2

CVSS 3.18.1

EPSS0.00348

SSVC