CVE-2026-81573highCWE-284

CVE-2026-81573: high-severity vulnerability in wibu-systems-ag codemeter-runtime

Improper Access Control in Local-Only Configuration Commands

Published

Follow this CVE+ Monitor codemeter-runtime

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.4%
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values in Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin takeover.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Affected products
wibu-systems-ag · codemeter-runtime
Related CVEs — wibu-systems-ag codemeter-runtime

In the same product, most dangerous first.

CVE-2026-81575HIGHMissing Sanity Checks for Buffer LengthsEPSS 0.5%CVE-2026-81574HIGHFormat String Vulnerability in LoggerEPSS 0.4%CVE-2026-81576HIGHImproper Authentication of Session HandlesEPSS 0.3%CVE-2026-81572HIGHLocal Privilege Escalation in CodeMeter Runtime on WindowsEPSS 0.2%