Beckhoff Automation

Products

ProductCVEsExploitedLatest
Beckhoff.Device.Manager.XAR3–Jan 27, 2026
MDP for Beckhoff RT Linux(R)3–Jan 27, 2026
MDP software package for TwinCAT/BSD3–Jan 27, 2026
TF2000-HMI-Server1–Jan 20, 2026
TwinCAT.HMI.Server1–Jan 20, 2026
TwinCAT OPC UA Server1–Nov 4, 2021

Exploited and recent CVEs

  • CVE-2025-41728 Medium 5.3 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
  • CVE-2025-41728 Medium 5.3 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
  • CVE-2025-41728 Medium 5.3 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
  • CVE-2025-41727 High 7.8 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
  • CVE-2025-41727 High 7.8 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
  • CVE-2025-41727 High 7.8 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
  • CVE-2025-41726 High 8.8 Beckhoff: Arbitrary code execution within privileged processes 0.5%
  • CVE-2025-41726 High 8.8 Beckhoff: Arbitrary code execution within privileged processes 0.5%
  • CVE-2025-41726 High 8.8 Beckhoff: Arbitrary code execution within privileged processes 0.5%
  • CVE-2025-41768 Medium 5.5 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server 0.2%
  • CVE-2025-41768 Medium 5.5 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server 0.2%
  • CVE-2021-34594 Medium 6.5 Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server 1.1%