CVE-2026-2364

7.3 highEPSS 0.09%

High (7.3). EPSS 0.09% chance of exploitation in the next 30 days.

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2026-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://certvde.com/de/advisories/VDE-2026-012

Check your stack JSON