CVE-2025-41660 HIGH

CVE-2025-41660: CODESYS Control Boot Application Replacement Enables Code Execution

Vendor Codesys
Product CODESYS Control RTE (SL)
Weakness CWE-669
Published March 24, 2026
Last update March 24, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.

Key dates

02Disclosure timeline

March 24, 2026 CVE published
March 24, 2026 Record updated