Skip to content
OpenAdvisories
High VDE-2026-007 1 CVE

TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability

Published Feb 23, 2026 · Updated Feb 23, 2026

Vendor: TRUMPF Product: Oseon Product: Programming Tube Product: TecZone Bend Product: TRUMPF License Expert Product: TruTops Boost Product: TruTops Cell Product: TruTops Weld

Summary

The TRUMPF product versions listed below include a Wibu CodeMeter component that is vulnerable to a privilege escalation vulnerability through the CodeMeter installer on Windows.

Details

Impact
The CodeMeter installer on Windows has a vulnerability that allows under certain circumstances an Escalation of Privileges for an unprivileged account. After installation on an unprivileged account with UAC using the built-in administrator account, CodeMeter launches the CodeMeter Control Center with system privileges.

Remediation
New versions are available for the affected products. These include an updated WiBu CodeMeter (bundled with TRUMPF License Expert). If your installation is affected, the easiest fix is to install the latest TRUMPF License Expert from https://www.trumpf.com/en_INT/products/software/software-licensing/.

| Fixed Product | Version |
| --------------------- | -------- |
| TruTops Boost | 21.00.00 |
| TecZone Bend | 25.11.1 |
| Oseon | 8.00.00 |
| Programming Tube | 6.9 |
| TruTops Cell | 2.77.0 |
| TruTops Weld | 11.0 |
| TRUMPF License Expert | 2.3.2 |

Vulnerabilities 1

  • High 8.2
    CVE-2025-47809

    Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or re…

    Wibu CodeMeter

Revision history

  1. #1.0.0

    Initial version

References