CVE-2026-44468 — Incorrect Default Permissions in CODESYS Development System
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary …
Published: 2026-05-26 · CVSS: 8.5 · CVSS 4.0
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary components.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7