Openplc

8 CVEs across 2 Openplc products. Browse Openplc vulnerabilities, severities, and proof-of-concept exploits.

Openplc products with known CVEs

ProductCVEs
Openplc V36
Openplc2
Openplc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-14480Critical9.92026-07-10OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attac…
CVE-2025-53476Medium5.32025-10-07A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted ser…
CVE-2025-1066Critical9.82025-02-06OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns.
CVE-2024-39590High7.52024-09-18Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb…
CVE-2024-39589High7.52024-09-18Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb…
CVE-2024-36981High7.52024-09-18An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88…
CVE-2024-36980High7.52024-09-18An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88…
CVE-2024-34026Critical9.02024-09-18A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007…