Vulnerability in Codesys Control For Beaglebone Sl
CVE-2026-79625
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.
Vulnerability class: Race Condition
Published .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Codesys Control For Beaglebone Sl
- Codesys Control For Empc-A/imx6 Sl
- Codesys Control For Iot2000 Sl
- Codesys Control For Linux Arm Sl
- Codesys Control For Linux Sl
- Codesys Control For Pfc100 Sl
- Codesys Control For Pfc200 Sl
- Codesys Control For Plcnext Sl
- Codesys Control For Raspberry Pi Sl
- Codesys Control For Wago Touch Panels 600 Sl
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-79625?
- CVE-2026-79625 is a high-severity vulnerability in Codesys Control For Beaglebone Sl, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 8.1/10. Published 2026-09-30.
- How severe is CVE-2026-79625?
- High severity. CVSS v3 base score is 8.1 out of 10.