CVE-2025-41660: CODESYS Control Boot Application Replacement Enables Code Execution
Published Mar 24, 2026
·Updated
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.
Affected Software
1 affected component
CODESYS CODESYS Control
Event History
Mar 24, 2026
CVE Published
via MITRE·07:41 AM
Data Sourced
via MITRE·07:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-41660?
CVE-2025-41660 has been assessed as a critical vulnerability due to its potential for unauthorized code execution.
2
How do I fix CVE-2025-41660?
To fix CVE-2025-41660, ensure that you update the CODESYS Control software to the latest version provided by the vendor.
3
What type of attacker can exploit CVE-2025-41660?
CVE-2025-41660 can be exploited by a low-privileged remote attacker who can replace the boot application.
4
What are the potential impacts of CVE-2025-41660?
The potential impacts of CVE-2025-41660 include unauthorized code execution, which could lead to system compromise and data loss.
5
Which software is affected by CVE-2025-41660?
CVE-2025-41660 affects the CODESYS Control runtime system.