CVE-2026-28205CWE-1188
Initialization of a resource with an insecure default in OpenPLC_V3
Critical · published April 9, 2026
What it is
OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain access to the system by bypassing authentication via an API.
The record
Technical detail
- CVSS v4.0
- 9.2 · CRITICAL
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
- EPSS
- 0.00669 · 51.4th percentile
- Weakness
- CWE-1188 · Initialization of a Resource with an Insecure Default
- Published
- 2026-04-09T18:54Z
EPSS history
Timeline