Known Vulnerabilities for Openplc by Openplcproject
Listed below are 1 of the newest known vulnerabilities associated with "Openplc" by "Openplcproject".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88020 json | Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when... | Not Provided | 2026-09-22 | 2026-09-23 |
| CVE-2026-71268 json | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) pr... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-11826 json | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() rea... | Not Provided | 2026-07-18 | 2026-07-20 |
| CVE-2025-34226 json | OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied du... | Not Provided | 2025-10-03 | 2026-08-14 |
| CVE-2021-3351 json | OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page. | 5.4 - MEDIUM | 2021-08-02 | 2021-08-09 |