PT-2026-31682 · Unknown · Openplc V3

Shriyans Sudhi · Published 2026-04-09 · Updated 2026-04-11 · CVE-2026-28205

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenPLC V3 (affected versions not specified)

Description OpenPLC V3 is susceptible to an Initialization of a Resource with an Insecure Default issue. This could allow an attacker to bypass authentication and gain access to the system through an API. The vulnerability allows access by bypassing authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2026-28205

Affected Products

Openplc V3

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-28205 · Security Note
• https://twitter.com/ss0x00/status/2043062848784363703 · Twitter Post
• https://twitter.com/CVEnew/status/2042340078253461673 · Twitter Post
• https://twitter.com/infoflowcloud/status/2042340773094425019 · Twitter Post
• https://twitter.com/0dayPublishing/status/2042666335017013560 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-345-10 · Note