CVE-2026-3509 — CODESYS Control Audit Log Format String DoS
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting i…
Published: 2026-03-24 · CVSS: 7.5 · CVSS 3.1
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7