Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-2364

CODESYS Installer TOCTOU Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Installer

Default version status: unaffected

  • 0.0.0 to < 2.6.1.0affected

References