What’s Vulnerable › Products

Apache Software Foundation Apache PLC4X vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Apache Software Foundation Apache PLC4X version is affected

Latest Apache Software Foundation Apache PLC4X vulnerabilities

• CVE-2026-102511 — Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them (CVSS 8.5)
• CVE-2026-102510 — Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths (CVSS 8.7)
• CVE-2026-102509 — Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser (CVSS 8.7)
• CVE-2026-102508 — Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade (CVSS 9.2)
• CVE-2021-43083 — Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response (CVSS 8.8)