Description
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Autonomy Logic | OpenPLC Runtime | 3 | 4 |
Advisories 1
- ICSA-26-265-09 OpenPLC Runtime v3 CISA ICS & IT advisories · Sep 22, 2026