View CSAF
Summary
Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue state-changing requests as an operator which would allow the attacker to control the programmable logic controller and the physical processes it drives.
The following versions of OpenPLC Runtime v3 are affected:
OpenPLC 3 (CVE-2026-88020)
CVSS
Vendor
Equipment
Vulnerabilities
v3 6.1
Autonomy Logic
OpenPLC Runtime v3
Improper Neutralization of Input During Web Page…
📰 来源: CISA 安全公告
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。