CVE-2026-35226

Name of the Vulnerable Software and Affected Versions CODESYS PROFINET Controller (affected versions not specified)

Description An out-of-bounds write occurs when the CODESYS PROFINET Controller processes malformed PROFINET communication data. An unauthenticated attacker on the same network segment can exploit this to trigger an exception in the PLC application. This exception is managed by the CODESYS Control runtime system, leading to a controlled stop of the PLC application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.