Vendor

OpenPLC

1 brief RSS

OpenPLC v3 Arbitrary File Write Leads to Native Code Execution (CVE-2026-14480)

An authenticated arbitrary file write vulnerability (CVE-2026-14480) in OpenPLC v3's legacy web UI program-upload workflow allows attackers to write arbitrary files, escalating to arbitrary native code execution as the OpenPLC runtime user when an operator triggers program compilation.

OpenPLC v3 ics scada vulnerability rce authenticated-rce file-write cwe-73

3t 2h ago