HIGH 8.7 NVD
CVE-2026-105281
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-02.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-10-09 via NVD.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.