Codesys Development System 3 vulnerabilities

CVE-2026-79625 [HIGH] CWE-362 CVE-2026-79625: Affected products do not properly synchronize access to their monitoring functionality. When multipl Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial

CVE-2026-76992 [HIGH] CWE-770 CVE-2026-76992: The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enfo The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablit