RT-Labs AB has 8 CVEs on record. Disclosure cadence is accelerating: 8 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 8. The median CVSS is 6.5 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-787 (4). Most affected products: SOEM (6), C-Open (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 8 prev 0
Worst active — by depth score
CVE-2026-82944High· 8.8Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers48CVE-2026-70388High· 8.3Memory Corruption via Integer Underflow in Message Length Validation46CVE-2026-82947High· 7.1Multiple Out-of-Bounds Reads in Frame Processing39CVE-2026-82946Medium· 6.5Null Pointer Dereference in Mailbox Error Handling36CVE-2026-82945Medium· 6.5Memory Corruption via FMMU Configuration Table Overflow36
RT-Labs AB vulnerabilities
CVEs affecting RT-Labs AB, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2026-70388High· 8.3Memory Corruption via Integer Underflow in Message Length Validation
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic…
CVE-2026-82943Medium· 6.5Out-of-Bounds Read via Unchecked Length Values
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses…
CVE-2026-82944High· 8.8Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers. The software checks the total size only once at the beginning, but doesn't track the cumulative…
CVE-2026-82945Medium· 6.5Memory Corruption via FMMU Configuration Table Overflow
SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index ex…
CVE-2026-82947High· 7.1Multiple Out-of-Bounds Reads in Frame Processing
SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages wi…
CVE-2026-82946Medium· 6.5Null Pointer Dereference in Mailbox Error Handling
SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrive…
CVE-2026-82357Medium· 6.5RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remo…
CVE-2026-82358Medium· 6.5RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write permissions when processing download-segment frames
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write permissions when processing download-segment frames. An unaut…