Skip to content
OpenAdvisories

Product · Grid Protection Alliance

openPDC

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-101022

    Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)

    A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing whi…

    Grid Protection Alliance openPDC (Docker image) openHistorian openPDC
  • Medium 5.3
    CVE-2026-85479

    Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function

    The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.

    Grid Protection Alliance openPDC (Docker image) openPDC openHistorian