Login Request a demo
AP
Product
Apache PLC4X
by Apache Software Foundation · last CVE Sep 30, 2026
4
CVEs
0
On KEV
9.2
Max CVSS
4
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities4Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache PLC4X to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102508
9.2
0%
Sep 30
Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
Affected: 0.9.0 before 1.0.0
CVE-2026-102510
8.7
0%
Sep 30
Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths
Affected: 0.11.0 before 1.0.0
CVE-2026-102509
8.7
0%
Sep 30
Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser
Affected: 0.10.0 before 1.0.0; 0.10.0 before 1.0.0
CVE-2026-102511
8.5
0%
Sep 30
Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them
Affected: 0.11.0 before 1.0.0; 0.10.0 before 1.0.0; 0.10.0 before 1.0.0; 0.11.0 before 1.0.0
Showing 4