Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache PLC4X

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-102508

    Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

    Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify …

    Apache Software Foundation Apache PLC4X