CVE-2026-8046 HIGH

CVE-2026-8046: Incorrect Authorization in CODESYS Control

Vendor Codesys
Product CODESYS Control RTE (SL)
Weakness CWE-863 · Incorrect authorization
Published May 26, 2026
Last update May 26, 2026

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

Key dates

02Disclosure timeline

May 26, 2026 CVE published
May 26, 2026 Record updated

Related vulnerabilities

04Related CVE