The vulnerability identified as CVE-2026-8046 in CODESYS Control RTE (SL) version 3.0.0.0 involves improper authorization verification when deleting user accounts. An attacker with low-level authentication can remotely exploit this weakness to delete accounts of other users, even those with elevated privileges. This issue is classified under CWE-863 (Incorrect Authorization) and has a CVSS 4.0 base score of 7.2, indicating high severity. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

Successful exploitation allows an authenticated low-privileged remote user to delete other user accounts, including higher-privileged ones. This can result in denial of access for legitimate users and potential disruption of system administration and operations. The vulnerability compromises the integrity of user account management within the affected product.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected system to trusted users only and monitor for suspicious account deletion activities. Avoid granting unnecessary user privileges to reduce risk.