# CODESYS Control for Linux ARM SL.

Every CVE that names CODESYS Control for Linux ARM SL among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper Synchronization in Monitoring in CODESYS Control Runtime](https://agentprime.io/advisories/CVE-2026-79625.md)
  `CVE-2026-79625` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Race condition
- [Out-of-bounds Write in CODESYS Control](https://agentprime.io/advisories/CVE-2026-8047.md)
  `CVE-2026-8047` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.7 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-1284
- [Incorrect Authorization in CODESYS Control](https://agentprime.io/advisories/CVE-2026-8046.md)
  `CVE-2026-8046` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.2 High · Not analysed yet · Published 26 May 2026 · Tags: Broken access control
- [CODESYS Control Audit Log Format String DoS](https://agentprime.io/advisories/CVE-2026-3509.md)
  `CVE-2026-3509` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption
- [CODESYS Control Boot Application Replacement Enables Code Execution](https://agentprime.io/advisories/CVE-2025-41660.md)
  `CVE-2025-41660` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-669
- [CODESYS Control - Invalid type usage in visualization](https://agentprime.io/advisories/CVE-2025-41738.md)
  `CVE-2025-41738` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2025 · Tags: Memory corruption
- [CODESYS Control - Linux/QNX SysSocket flaw](https://agentprime.io/advisories/CVE-2025-41739.md)
  `CVE-2025-41739` · CVE record: CODESYS CODESYS PLCHandler and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: Memory corruption
- [CODESYS Control DoS via Unauthenticated NULL Pointer Dereference](https://agentprime.io/advisories/CVE-2025-41691.md)
  `CVE-2025-41691` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2025 · Tags: Memory corruption
- [CODESYS Control PKI Exposure Enables Remote Certificate Access](https://agentprime.io/advisories/CVE-2025-41659.md)
  `CVE-2025-41659` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 8.3 High · Not analysed yet · Published 4 Aug 2025 · Tags: Broken access control
- [CODESYS Toolkit Exposes Sensitive Files via Default Permissions](https://agentprime.io/advisories/CVE-2025-41658.md)
  `CVE-2025-41658` · CVE record: CODESYS Runtime Toolkit and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 4 Aug 2025 · Tags: Broken access control
- [CODESYS Control V3 removable media path traversal](https://agentprime.io/advisories/CVE-2025-0694.md)
  `CVE-2025-0694` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: Path traversal
- [CODESYS: web server vulnerable to DoS](https://agentprime.io/advisories/CVE-2024-8175.md)
  `CVE-2024-8175` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-754
- [CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products](https://agentprime.io/advisories/CVE-2024-5000.md)
  `CVE-2024-5000` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2024 · Tags: Memory corruption
- [OS Command Injection in multiple CODESYS products](https://agentprime.io/advisories/CVE-2023-6357.md)
  `CVE-2023-6357` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=codesys-control-for-linux-arm-sl>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/codesys-control-for-linux-arm-sl/>. Everything for agents: <https://agentprime.io/llms.txt>.