Apache Software Foundation Apache PLC4X

• CVE-2026-102511 High 8.5 Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them 0.2%
• CVE-2026-102510 High 8.7 Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths 0.3%
• CVE-2026-102509 High 8.7 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser 0.4%
• CVE-2026-102508 Critical 9.2 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade 0.2%
• CVE-2021-43083 Unrated Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response 2.0%