Openplcproject Openplc vulnerabilities

• openplc v3 v3, openplcproject openplc v3 +1 more OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData() CVE-2026-11826 8.7 HighJuly 18, 2026
• openplcproject openplc v3 firmware A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as... CVE-2026-31156 Public exploit 6.5 MediumMay 13, 2026
• openplc v3 v3, openplcproject openplc v3 firmware +1 more Missing Authorization in OpenPLC_V3 CVE-2026-35063 8.7 HighApril 9, 2026
• openplc v3 v3, openplcproject openplc v3 firmware +1 more Plaintext storage of a password in OpenPLC_V3 CVE-2026-35556 9.2 CriticalApril 9, 2026
• openplc v3 v3, openplcproject openplc v3 firmware +1 more Initialization of a resource with an insecure default in OpenPLC_V3 CVE-2026-28205 9.2 CriticalApril 9, 2026
• autonomy openplc OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access... CVE-2025-46613 7.5 HighApril 25, 2025
• openplc v3, openplcproject openplc v3, openplc v3 firmware +2 more An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser... CVE-2024-36981 7.5 HighSeptember 18, 2024
• openplc v3, openplcproject openplc v3, openplc v3 firmware +2 more An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser... CVE-2024-36980 7.5 HighSeptember 18, 2024
• openplc v3, openplcproject openplc v3, openplc v3 firmware +2 more A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser... CVE-2024-34026 9.0 CriticalSeptember 18, 2024
• openplc v3, openplcproject openplc v3, openplc v3 firmware +2 more Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP... CVE-2024-39590 7.5 HighSeptember 18, 2024
• openplc v3, openplcproject openplc v3, openplc v3 firmware +2 more Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP... CVE-2024-39589 7.5 HighSeptember 18, 2024
• openplcproject openplc v3 firmware OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture. CVE-2024-37741 5.4 MediumJune 28, 2024
• openplcproject openplc v3 firmware Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via... CVE-2021-31630 Public exploit EPSS 27.1% 8.8 HighAugust 3, 2021
• openplcproject openplc OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's... CVE-2021-3351 5.4 MediumAugust 2, 2021
• openplcproject openplc v2 firmware, openplc v3 firmware +1 more A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and... CVE-2018-20818 9.8 CriticalApril 21, 2019