Advisories · Technology

OpenPLC_V3.

Every CVE that names OpenPLC_V3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35063 CVE record

CVSS 8.7 High

Missing Authorization in OpenPLC_V3
- OpenPLC_V3
- Broken access control
Not analysed yet 9 Apr 2026
CVE-2026-35556 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Plaintext storage of a password in OpenPLC_V3
- OpenPLC_V3
- CWE-256
Not analysed yet 9 Apr 2026
CVE-2026-28205 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Initialization of a resource with an insecure default in OpenPLC_V3
- OpenPLC_V3
- CWE-1188
Not analysed yet 9 Apr 2026
CVE-2025-13970 CVE record

CVSS 7.0 High

OpenPLC_V3 Cross-Site Request Forgery
- OpenPLC_V3
- Cross-site request forgery (CSRF)
Not analysed yet 13 Dec 2025
CVE-2025-53476 CVE record

CVSS 5.3 Medium

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58.
- OpenPLC_v3
- CWE-775
Not analysed yet 7 Oct 2025
CVE-2025-54811 CVE record

CVSS 6.1 Medium

OpenPLC_V3
- OpenPLC_V3
- CWE-758
Not analysed yet 1 Oct 2025
CVE-2024-36981 CVE record

CVSS 7.5 High

Out-of-bounds read in OpenPLC_v3
- OpenPLC_v3
- Memory corruption
Not analysed yet 18 Sept 2024
CVE-2024-36980 CVE record

CVSS 7.5 High

Out-of-bounds read in OpenPLC_v3
- OpenPLC_v3
- Memory corruption
Not analysed yet 18 Sept 2024
CVE-2024-34026 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stack-based buffer overflow in OpenPLC_v3
- OpenPLC_v3
- Memory corruption
Not analysed yet 18 Sept 2024
CVE-2024-39590 CVE record

CVSS 7.5 High

Incorrect type conversion in OpenPLC_v3
- OpenPLC_v3
- CWE-704
Not analysed yet 18 Sept 2024
CVE-2024-39589 CVE record

CVSS 7.5 High

Incorrect type conversion in OpenPLC_v3
- OpenPLC_v3
- CWE-704
Not analysed yet 18 Sept 2024