Beckhoff Automation Vulnerabilities and Affected Products
Vulnerabilities associated with TF2000-HMI-Server.
Products
Clear product- Beckhoff.Device.Manager.XAR3 vulnerabilities
- MDP for Beckhoff RT Linux(R)3 vulnerabilities
- MDP software package for TwinCAT/BSD3 vulnerabilities
- TF2000-HMI-Server1 vulnerability
- TwinCAT OPC UA Server1 vulnerability
- TwinCAT.HMI.Server1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-41768MEDIUM | Beckhoff: XSS Vulnerability in TwinCAT 3 HMI ServerAn high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting'). CWE-79Jan 20, 2026 | CVSS5.5v3.1 | EPSS0.207% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |