Thiagoralves Openplc V3
2 CVEs affecting Thiagoralves Openplc V3. Latest disclosed: 2026-08-05. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71268 | Critical | 9.9 | 2026-08-05 | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes the referen… |
CVE-2025-54962 | Medium | 6.4 | 2025-08-04 | /edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then p… |