CVE-2026-35226: An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data

mediumCVSS 6.5CVE-2026-35226

An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: medium — CVSS 6.5
Published: 2026-07-29
Last updated: 2026-07-30
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-35226

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-352260.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-35226	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEW] [medium] CODESYS: Vulnerability allows Denial of Servicecert-bund

Recent advisories for An out‑of‑bounds write

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-34641: Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrar…nvd · 2026-07-31
highCVE-2026-65423: An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may all…nvd · 2026-07-30
criticalCVE-2026-47876: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapte…nvd · 2026-07-30
unknownCVE-2026-17544: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap …nvd · 2026-07-30
criticalCVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote…nvd · 2026-07-30
criticalCVE-2026-17727: Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remo…nvd · 2026-07-30