Home / Vulnerability Intelligence / CVE-2025-41660

CVE-2025-41660 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 24, 2026

CODESYS Control - Authentication Bypass

Published: March 24, 2026Updated: March 24, 2026Remote Exploitable

Overview

CODESYS Control runtime system contains a code execution vulnerability caused by insufficient protection of the boot application, letting low-privileged remote attackers execute unauthorized code.

Severity & Score

Severity: High

CVSS Score: 8.8

Impact

Low-privileged remote attackers can execute unauthorized code, potentially compromising the entire system.

Mitigation

Update to the latest version of CODESYS Control runtime system.

References

https://certvde.com/de/advisories/VDE-2026-011

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2025-41660
Severity: High
CVSS Score: 8.8
Type: undefined
Status: new

CWE

CWE-669

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H