1. Home
  2. CVE Database
  3. CVE-2026-0393
MEDIUM · 6.5

CVE-2026-0393

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerabili...

Vulnerability Description

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CodesysVisualization>= 1.0.0.0, < 4.10.0.0

Related Weaknesses (CWE)

CWE-522

References

FAQ

What is CVE-2026-0393?

CVE-2026-0393 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerabili...

How severe is CVE-2026-0393?

CVE-2026-0393 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-0393?

Check the references section above for vendor advisories and patch information. Affected products include: Codesys Visualization.