Access Control

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.CVE-2019-9008Codesys · 2.1% likelycovered by CyberSIXT

   CWE-732

2. A component of the CODESYS Control runtime system allows read and write access to configuration filesCVE-2022-22515CODESYS · CVSS 8.1 · 1.3% likely

   CWE-668

3. CODESYS: Missing integrity check in CODESYS Development SystemCVE-2023-3663CODESYS · CVSS 8.8 · 1.0% likely

   CWE-940

4. A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.CVE-2022-22518CODESYS · CVSS 6.5 · 0.6% likely

   CWE-276

5. Forced Browsing Vulnerability in CODESYS VisualizationCVE-2025-2595CODESYS · CVSS 5.3 · 0.5% likely

   CWE-425

6. CODESYS Control Boot Application Replacement Enables Code ExecutionCVE-2025-41660CODESYS · CVSS 8.8 · 0.5% likely

   CWE-669

7. Incorrect Authorization in CODESYS ControlCVE-2026-8046CODESYS · CVSS 8.1 · 0.3% likely

   CWE-863

8. CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.CVE-2022-22516CODESYS · CVSS 7.8 · 0.3% likely

   CWE-732

9. CODESYS Control PKI Exposure Enables Remote Certificate AccessCVE-2025-41659CODESYS · CVSS 8.3 · 0.3% likely

   CWE-732

10. Codesys: Vulnerability in CODESYS Development System and CODESYS ScriptingCVE-2023-3670CODESYS · CVSS 7.3 · 0.2% likely

    CWE-668

11. CODESYS: Development system prone to DoS through exposure of resource to wrong sphereCVE-2023-5751CODESYS · CVSS 7.8 · 0.2% likely

    CWE-668

12. CODESYS Toolkit Exposes Sensitive Files via Default PermissionsCVE-2025-41658CODESYS · CVSS 5.5 · 0.1% likely

    CWE-276

13. Incorrect Default Permissions in CODESYS Development SystemCVE-2026-44468CODESYS · CVSS 7.8 · 0.1% likely

    CWE-276

14. Incorrect Default Permissions in CODESYS Development SystemCVE-2026-44469CODESYS · CVSS 7.8 · 0.1% likely

    CWE-276

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.