CVE-2025-41768: Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
Published Jan 20, 2026
·Updated
An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting').
Affected Software
1 affected component
Beckhoff TwinCAT 3 HMI Server
Event History
Jan 20, 2026
CVE Published
via MITRE·08:02 AM
Data Sourced
via MITRE·08:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-41768?
CVE-2025-41768 is categorized as a high severity XSS vulnerability.
2
How does CVE-2025-41768 affect users of TwinCAT 3 HMI Server?
CVE-2025-41768 allows authenticated administrators to inject arbitrary content, compromising the integrity of the application's user interface.
3
Can CVE-2025-41768 be exploited remotely?
No, CVE-2025-41768 requires authenticated access to exploit the vulnerability.
4
How can I mitigate CVE-2025-41768?
To mitigate CVE-2025-41768, users should sanitize input in the custom CSS field and apply patches from Beckhoff.
5
Is there a fix available for CVE-2025-41768?
Yes, Beckhoff has released patches to address the issues related to CVE-2025-41768.