OpenPLC

Products

ProductCVEsExploitedLatest
OpenPLC_v36–Oct 7, 2025
OpenPLC2–Jul 10, 2026

Exploited and recent CVEs

  • CVE-2026-14480 Critical 9.9 OpenPLC v3 External Control of File Name or Path 0.6%
  • CVE-2025-53476 Medium 5.3 A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to th 0.5%
  • CVE-2025-1066 Critical 9.8 CVE-2025-1066 0.5%
  • CVE-2024-36981 High 7.5 An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can 1.0%
  • CVE-2024-36980 High 7.5 An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can 1.1%
  • CVE-2024-34026 Critical 9.0 A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP requ 2.4%
  • CVE-2024-39590 High 7.5 Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/ 1.0%
  • CVE-2024-39589 High 7.5 Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/ 1.0%