CVE-2026-0393CWE-522

CODESYS Visualization - Insufficiently Protected Credentials

Medium · published May 21, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00244 · 14.7th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-05-21T10:44Z
EPSS history
Timeline
  • 21 MAY 10:44Z
    CODESYS Visualization - Insufficiently Protected Credentials
    cvelistv5