Loading story…
Canada’s Centre for Cyber Security issued advisory AV26-983 for vulnerabilities affecting numerous CODESYS industrial-automation products. The reported issues include uncontrolled memory allocation in CODESYS Gateway Client and improper synchronization in the monitoring functionality of CODESYS Control Runtime.
Affected offerings span CODESYS control runtimes, development tools, gateways, HMI products, OPC DA Server, PLCHandler, Runtime Toolkit, Safety SIL2, and Virtual Control products. Organizations operating CODESYS environments should review the vendor’s security advisories, identify exposed and affected deployments, and apply available updates.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued control-systems advisory AV26-983, directing users and administrators to review CODESYS security advisories and apply necessary updates when available.
Multiple CODESYS industrial-control products were identified as affected by an uncontrolled memory-allocation vulnerability in CODESYS Gateway Client and an improper-synchronization flaw in CODESYS Control Runtime monitoring. Affected offerings include control runtimes, development tools, gateways, HMI, OPC DA Server, PLCHandler, Runtime Toolkit, Safety SIL2, and Virtual Control products.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcecodesys.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Germany's dCERT published advisories **2026-0816** and **2026-1645** covering **multiple vulnerabilities in CODESYS**, a widely used industrial control and automation software platform. The notices indicate that more than one security flaw affects CODESYS components, raising potential risk for organizations that rely on the platform in operational technology and industrial control system environments. The advisories were issued as separate disclosures, suggesting either newly identified issues or additional affected components beyond the initial notice. While the published entries provide no public synopsis, the repeated dCERT warnings signal that asset owners using CODESYS should review the referenced advisories, identify affected deployments, and prioritize vendor guidance and remediation to reduce exposure across ICS environments.
Jun 29, 2026
Advantech disclosed multiple vulnerabilities affecting its **WISE-6610** industrial gateway product line. The issues affect multiple models and software versions, although the available public notices do not specify CVE identifiers, severity scores, technical impacts, or evidence of exploitation. The Canadian Centre for Cyber Security issued advisory `AV26-907` covering the affected gateways and directed operators and administrators to Advantech’s security advisory for product-specific details. Organizations using WISE-6610 devices should identify exposed and deployed units, review Advantech guidance, and apply available updates through established industrial-control-system change-management processes.
Sep 10, 2026
Canada’s Centre for Cyber Security issued advisory **AV26-890** warning that vulnerabilities affect multiple Siemens products used across industrial, engineering, security, and building-management environments. The affected portfolio includes Reyrolle 7SR5 protection relays before version `V2.70`, Teamcenter, Siveillance Control, SIMATIC AX Runtime, the Desigo CC product family, Industrial Edge Management, SIMOVE Fleetmanager, and SIPLANT. The advisory does not disclose CVE identifiers, severity scores, technical vulnerability details, exploitation status, or complete remediation versions. Siemens customers should review the vendor’s CERT Services advisories, identify affected deployments, and apply relevant updates as they become available, prioritizing systems that support operational technology or critical facilities.
Sep 9, 2026