CVE-2025-41768 | Beckhoff Automation TwinCAT.HMI.Server prior 14.4.267 cross site scripting (VDE-2025-106)

January 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Beckhoff Automation TwinCAT.HMI.Server, TF2000-HMI-Server and tf2000-hmi-server. The affected element is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-41768. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More