Back to Database
Status published
Medium
CVE-2025-41768
Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
Vulnerability Description
An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting').
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41768
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Roby Firnando Yusuf from Jeonbuk National University
More from Beckhoff Automation
View All →CVE-2025-41728
Beckhoff: Information leak via Beckhoff Device Manager
Medium
5.3
CVE-2025-41727
Beckhoff: Performing privileged operations and gaining administrator access
High
7.8
CVE-2025-41726
Beckhoff: Arbitrary code execution within privileged processes
High
8.8
CVE-2021-34594
Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
Medium
6.5
Affected Vendor
Beckhoff Automation
View all reports →Affected Software
TwinCAT.HMI.Server, TF2000-HMI-Server, tf2000-hmi-server
Vulnerable Versions:
0.0.0
Timeline
Official Publish:
January 20th, 2026
Last Modified:
February 12th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N