Medium severity6.5NVD Advisory· Published May 21, 2026· Updated Jun 1, 2026

CVE-2026-0393

Description

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.

Affected products

Codesys/Visualization
cpe:2.3:a:codesys:visualization:*:*:*:*:*:*:*:*
Range: >=1.0.0.0,<4.10.0.0

Patches

Vulnerability mechanics

References

codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-07_vde-2026-052.jsonnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000