CVE-2026-3509 in CODESYS Control RTE
Summary
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Responsible
CERTVDE
Reservation
03/04/2026
Disclosure
03/24/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352704 | CODESYS Control RTE format string | 134 | Not defined | Official fix | CVE-2026-3509 |