CVE-2026-81573

EUVD-2026-66980
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network-
origin restrictions. Commands intended only for local or same-network clients can therefore be executed by
arbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values
in Server.ini. This does include the hash of the credentials for the CodeMeter WebAdmin, enabling WebAdmin
takeover.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
wibuCNA
8.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 31.71%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
wibucodemeter_runtime
9.0 ≤
𝑥
< 9.10
CNA
wibucodemeter_runtime
8.0 ≤
𝑥
< 8.41a
CNA
wibucodemeter_runtime
7.0 ≤
𝑥
< 8.0
CNA
wibucodemeter_runtime
6.0 ≤
𝑥
< 7.0
CNA
Common Weakness Enumeration
References
https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-103401.pdf