Phoenix Contact GmbH & Co. KG vulnerabilities and threats

Multiple security vulnerabilities in Phoenix Contact's CodeMeter Runtime license validation allow unauthenticated attackers to delete arbitrary files, read and overwrite sensitive configuration data, and crash the runtime. These issues affect version 1.8.2 on Windows, Linux, and Mac systems running Phoenix Contact software tools.

Multiple vulnerabilities affect Phoenix Contact's software version 2026.6, including a signature verification bypass in GSDX, a plugin deployment signature bypass, and a path traversal vulnerability during plugin deployment. These flaws allow tampered device descriptions to be accepted as valid, arbitrary code execution via unsigned plugin components, and writing files outside intended directories with user permissions.