CVE-2026-0393mediumCWE-522

CVE-2026-0393: medium-severity vulnerability in CODESYS Visualization

CODESYS Visualization - Insufficiently Protected Credentials

Published

Follow this CVE+ Monitor CODESYS Visualization

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
CODESYS · Visualization