Approved changes feed: RSS · Atom

cpe:2.3:a:beckhoff_automation:tf2000-hmi-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeckhoff Automation (bd88e854-65a2-59af-96cb-6ca10b468a80)
ProductTf2000 Hmi Server (23f8cdd2-fab0-583f-ac6e-5568cb8ecce6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41768 vulnerable 2026-06-08 07:25:08.342987 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
MEDIUM (5.5)
An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting').
Published: 2026-01-20T08:02:53.356Z
Updated: 2026-02-12T09:00:27.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.