Skip to content
OpenAdvisories

Vendor

Grid Protection Alliance

6 known vulnerabilities.

Products

openPDC (Docker image) 6 openPDC 5 openHistorian 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-104629

    Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code

    A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this…

    Grid Protection Alliance openPDC (Docker image) openHistorian openPDC
  • High 7.5
    CVE-2026-105281

    Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function

    The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.

    Grid Protection Alliance openPDC (Docker image) openPDC openHistorian