Remote Code Execution Vulnerability in CODESYS Visualization by CODESYS Group

CVE-2025-2595

What is CVE-2025-2595?

An unauthenticated remote attacker can exploit a vulnerability in CODESYS Visualization, allowing them to bypass user management controls and gain unauthorized access to sensitive visualization template files and static elements. This is achieved through a technique known as forced browsing, posing significant risks to the confidentiality and integrity of the data managed by the affected system.

References