Openplc
7 CVEs across 2 Openplc products. Browse Openplc vulnerabilities, severities, and proof-of-concept exploits.
Openplc products with known CVEs
Openplc CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-14480 | Critical | 9.9 | 2026-07-10 | OpenPLC Runtime v3 contains an authenticated arbitrary file write
vulnerability in the legacy web UI program‑upload workflow. The
application stores an attac… |
CVE-2025-53476 | Medium | 5.3 | 2025-10-07 | A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted ser… |
CVE-2025-1066 | Critical | 9.8 | 2025-02-06 | OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns. |
CVE-2024-39590 | High | 7.5 | 2024-09-18 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb… |
CVE-2024-39589 | High | 7.5 | 2024-09-18 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb… |
CVE-2024-36981 | High | 7.5 | 2024-09-18 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88… |
CVE-2024-36980 | High | 7.5 | 2024-09-18 | An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88… |
CVE-2024-34026 | Critical | 9.0 | 2024-09-18 | A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007… |