Advisories · Technology

Apache Software Foundation Apache PLC4X.

Every CVE that names Apache Software Foundation Apache PLC4X among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-102511 CVE record

CVSS 8.5 High

Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them
- Apache Software Foundation Apache PLC4X
- Denial of service
- CWE-129
Not analysed yet 30 Sept 2026
CVE-2026-102510 CVE record

CVSS 8.7 High

Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths
- Apache Software Foundation Apache PLC4X
- Memory corruption
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-102509 CVE record

CVSS 8.7 High

Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser
- Apache Software Foundation Apache PLC4X
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-102508 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
- Apache Software Foundation Apache PLC4X
- Weak cryptography or TLS
- CWE-757
Not analysed yet 30 Sept 2026
CVE-2021-43083 CVE record

Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response
- Apache Software Foundation Apache PLC4X
- Memory corruption
Not analysed yet 19 Dec 2021