Apache Plc4x (Apache Software Foundation) - vulnerabilities (CVEs)

5 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-09-30. Vendor: Apache Software Foundation.

CVEs of Apache Plc4x

• CVE-2026-102511 - CVSS 8.5 (high), 2026-09-30: Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker able to…
• CVE-2026-102510 - CVSS 8.7 (high), 2026-09-30: Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of…
• CVE-2026-102509 - CVSS 8.7 (high), 2026-09-30: Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X…
• CVE-2026-102508 - CVSS 9.2 (critical), 2026-09-30: Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a…
• CVE-2021-43083 - CVSS 8.8 (high), 2021-12-19: Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users…