CVE Tools
Track your stack

Openplcproject

5 CVEs tracked since 2024. Since Sep 2024, none of them reached CISA KEV.

Openplcproject CVEs per month

Sep 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Openplcproject CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0950
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Openplcproject's monthly top three, with their CVEs summed over those months.

  1. Openplc V3 Firmware51 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Openplcproject.

  1. CVE-2026-11826OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()8.8
  2. CVE-2026-31156A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_generator.cpp does not perform any validation on the file pat...6.5
  3. CVE-2026-35063Missing Authorization in OpenPLC_V38.8
  4. CVE-2026-35556Plaintext storage of a password in OpenPLC_V37.5
  5. CVE-2026-28205Initialization of a resource with an insecure default in OpenPLC_V39.8
  6. CVE-2025-46613OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable.7.5
  7. CVE-2024-36981An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request c...7.5
  8. CVE-2024-36980An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request c...7.5
  9. CVE-2024-34026A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP r...9.0
  10. CVE-2024-39589Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherN...7.5
  11. CVE-2024-39590Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherN...7.5
  12. CVE-2024-37741OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.5.4
  13. CVE-2021-31630Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.8.8
  14. CVE-2021-3351OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page.5.4
  15. CVE-2018-20818A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime cr...9.8

The record

Peak rank
#131 in Sep 2024
Busiest month shown
Sep 2024, 5 CVEs
Months with a KEV entry
0 since Sep 2024
Monthly snapshots
1 since 2024
Openplcproject's full record, month by month