CVE-2026-2364 — CODESYS Installer TOCTOU Privilege Escalation
If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a…
Published: 2026-03-10 · CVSS: 7.3 · CVSS 3.1
If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7