OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs d…
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encod…
CVSS 4.0MEDIUM 5.3·Network·No auth·User interaction·EPSS 0.00275·Published 2026-09-22·Fixed in 4CWE-79