Vendor
OpenPLC
8 known vulnerabilities in products by OpenPLC, 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-34026 | OpenPLC_v3: Stack-based Buffer Overflow | 9.0 | |
| Critical | CVE-2026-14480 | OpenPLC v3 External Control of File Name or Path | 9.9 | |
| High | CVE-2024-36980 | OpenPLC_v3: Out-of-bounds Read | 7.5 | |
| High | CVE-2024-36981 | OpenPLC_v3: Out-of-bounds Read | 7.5 | |
| High | CVE-2024-39590 | OpenPLC_v3: Incorrect Type Conversion or Cast | 7.5 | |
| High | CVE-2024-39589 | OpenPLC_v3: Incorrect Type Conversion or Cast | 7.5 | |
| Critical | CVE-2025-1066 | OpenPLC: Unrestricted File Upload | 9.8 | |
| Medium | CVE-2025-53476 | OpenPLC_v3: Missing Release of File Descriptor or Handle after Effective Lifetime | 5.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
Products
| OpenPLC_v3 | 6 | 0 |