Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Autonomy Logic Clear all filters
TI-2026-60045 CVE-2026-88020 · GHSA-2rm8-h9xj-p8hw

Improper Neutralization of Input During Web Page Generation in OpenPLC Runtime v3

Priority LOW 24

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encod…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00275 Published 2026-09-22 Fixed in 4 CWE-79
TI-2025-24372 CVE-2025-34226 · GHSA-qjpv-g9fx-fc98

OpenPLC Runtime v3 Persistent DoS

Priority MEDIUM 64

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs d…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00678 Published 2025-10-03 Fixed CWE-20