Cve-2026-3509 — CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-3509/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 25 Mar 2026 12:00:00 +0000CODESYS Control Runtime System Audit Log DoS Vulnerability (CVE-2026-3509)https://feed.craftedsignal.io/briefs/2026-03-codesys-dos/Wed, 25 Mar 2026 12:00:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-03-codesys-dos/An unauthenticated remote attacker can exploit CVE-2026-3509 in the CODESYS Control runtime system to control the format string of messages processed by the Audit Log, leading to a denial-of-service (DoS) condition.<p>CVE-2026-3509 describes a format string vulnerability within the Audit Log of the CODESYS Control runtime system. This vulnerability allows an unauthenticated remote attacker to influence the format string of messages processed by the affected system. Successful exploitation of this vulnerability results in a denial-of-service (DoS) condition, impacting the availability of the CODESYS Control runtime system. The vulnerability was reported on March 24, 2026. CODESYS is a popular development…</p> highadvisorycodesysdoscve-2026-3509icsot