Skip to content
OpenAdvisories

Vendor

OpenPLC

8 known vulnerabilities.

Products

OpenPLC_v3 6 OpenPLC 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-14480

    OpenPLC v3 External Control of File Name or Path

    OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attacker‑supplied filename (prog_file) directly into the Programs.File database field and later uses this v…

    OpenPLC OpenPLC
  • Critical 9.8
    CVE-2025-1066

    CVE-2025-1066

    OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns.

    OpenPLC OpenPLC
  • Critical 9.0
    CVE-2024-34026

    A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _…

    OpenPLC OpenPLC_v3