Beckhoff Automation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Beckhoff.Device.Manager.XAR | 3 | – | Jan 27, 2026 |
| MDP for Beckhoff RT Linux(R) | 3 | – | Jan 27, 2026 |
| MDP software package for TwinCAT/BSD | 3 | – | Jan 27, 2026 |
| TF2000-HMI-Server | 1 | – | Jan 20, 2026 |
| TwinCAT.HMI.Server | 1 | – | Jan 20, 2026 |
| TwinCAT OPC UA Server | 1 | – | Nov 4, 2021 |
Exploited and recent CVEs
- CVE-2025-41728 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
- CVE-2025-41728 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
- CVE-2025-41728 Beckhoff: Information leak via Beckhoff Device Manager 0.3%
- CVE-2025-41727 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
- CVE-2025-41727 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
- CVE-2025-41727 Beckhoff: Performing privileged operations and gaining administrator access 0.2%
- CVE-2025-41726 Beckhoff: Arbitrary code execution within privileged processes 0.5%
- CVE-2025-41726 Beckhoff: Arbitrary code execution within privileged processes 0.5%
- CVE-2025-41726 Beckhoff: Arbitrary code execution within privileged processes 0.5%
- CVE-2025-41768 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server 0.2%
- CVE-2025-41768 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server 0.2%
- CVE-2021-34594 Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server 1.1%