Skip to content
Threat Feed
Subscribe

Product

OpenPLC_v3

1 brief RSS
critical advisory

OpenPLC_v3 Heap-Based Buffer Overflow (CVE-2026-11826)

An authenticated attacker can exploit CVE-2026-11826, a heap-based buffer overflow in OpenPLC_v3's web interface, by sending a crafted HTTP POST request to the /modbus endpoint with an oversized device_name value, causing heap corruption, a runtime crash, and denial of service of the PLC process control loop, with no expected patch.

OpenPLC_v3 ics ot buffer-overflow denial-of-service cve industrial-control-systems
1r 2t 1c