CVE Feed

    Dashboard / CVE / CVE-2026-8047

    CVE-2026-8047

    The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

    Published:May 26, 2026
    Last Modified:May 27, 2026
    EPS:May 26, 2026
    EPSS Score:0.00075
    CVSS Score:7.5

    Affected Products

    Vendor
    Codesys
    Product
    Codesys Control For Beaglebone Sl
    Vendor
    Codesys
    Product
    Codesys Control For Empc A Imx6 Sl
    Vendor
    Codesys
    Product
    Codesys Control For Iot2000 Sl
    Vendor
    Codesys
    Product
    Codesys Control For Linux Arm Sl
    Vendor
    Codesys
    Product
    Codesys Control For Linux Sl
    Vendor
    Codesys
    Product
    Codesys Control For Pfc100 Sl
    Vendor
    Codesys
    Product
    Codesys Control For Pfc200 Sl
    Vendor
    Codesys
    Product
    Codesys Control For Plcnext Sl
    Vendor
    Codesys
    Product
    Codesys Control For Raspberry Pi Sl
    Vendor
    Codesys
    Product
    Codesys Control For Wago Touch Panels 600 Sl
    Vendor
    Codesys
    Product
    Codesys Control Rte For Beckhoff Cx Sl
    Vendor
    Codesys
    Product
    Codesys Control Rte Sl
    Vendor
    Codesys
    Product
    Codesys Control Win Sl
    Vendor
    Codesys
    Product
    Codesys Hmi Sl
    Vendor
    Codesys
    Product
    Codesys Runtime Toolkit
    Vendor
    Codesys
    Product
    Codesys Virtual Control Sl
    Vendor
    Codesys
    Product
    Control For Beaglebone Sl
    Vendor
    Codesys
    Product
    Control For Empc-a/imx6 Sl
    Vendor
    Codesys
    Product
    Control For Iot2000 Sl
    Vendor
    Codesys
    Product
    Control For Linux Arm Sl
    Vendor
    Codesys
    Product
    Control For Linux Sl
    Vendor
    Codesys
    Product
    Control For Pfc100 Sl
    Vendor
    Codesys
    Product
    Control For Pfc200 Sl
    Vendor
    Codesys
    Product
    Control For Plcnext Sl
    Vendor
    Codesys
    Product
    Control For Raspberry Pi Sl
    Vendor
    Codesys
    Product
    Control For Wago Touch Panels 600 Sl
    Vendor
    Codesys
    Product
    Control Rte (for Beckhoff Cx) Sl
    Vendor
    Codesys
    Product
    Control Rte Sl
    Vendor
    Codesys
    Product
    Control Win Sl
    Vendor
    Codesys
    Product
    Hmi Sl
    Vendor
    Codesys
    Product
    Runtime Toolkit
    Vendor
    Codesys
    Product
    Virtual Control Sl

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High