OpenPLC vulnerabilities
We track 6 vulnerabilities in OpenPLC products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.
Latest OpenPLC vulnerabilities
- 9.9 Critical severity
OpenPLC: External Control of File Name or Path
OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. The application stores an attacker‑supplied filename (prog_file) directly into the Programs.File database field and later uses this va
- 7.5 High severity
OpenPLC_v3: Incorrect Type Conversion or Cast
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can se
- 7.5 High severity
OpenPLC_v3: Incorrect Type Conversion or Cast
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can se
- 7.5 High severity
OpenPLC_v3: Out-of-bounds Read
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of
- 7.5 High severity
OpenPLC_v3: Out-of-bounds Read
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of
- 9.8 Critical severity
OpenPLC_v3: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send