PPSA-2026-002 — Pilz: Vulnerability affecting PASvisu Runtime

Summary

The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by malicious web requests.

Details

Impact
A successful attack leads to a loss of availability of the affected Pilz products. For the products to be operational again, a manual restart is required.

Remediation
Limit network access to PASvisu server by using a firewall, a host-based firewall or similar measures.;

Vulnerabilities 1

High 7.5

CVE-2018-25193

Mongoose Web Server 6.9 Denial of Service via Socket Connection

Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections. Attackers can repeatedly create connections to the default port and send malformed data to exhaus…

Cesanta Software Mongoose Web Server

Mar 6, 2026

Revision history

2026-04-23 #1.0.0
Initial Version

References

For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)
https://www.pilz.com/security
CERT@VDE Security Advisories for Pilz GmbH & Co. KG
https://certvde.com/en/advisories/vendor/pilz/
PPSA-2026-002: Pilz: Vulnerability affecting PASvisu Runtime - HTML
https://certvde.com/en/advisories/VDE-2026-019/