[ Vendor · 6 CVEs ]
Grid Protection Alliance
CVEs affecting Grid Protection Alliance published in the last 30 days, plus any Grid Protection Alliance CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105278 | 9 Oct 2026 | CVSS 9.8 | Grid Protection Alliance openPDC (Docker image)The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access… | |
| CVE-2026-85479 | 9 Oct 2026 | CVSS 5.3 | Grid Protection Alliance openPDCThe STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network… | |
| CVE-2026-104629 | 9 Oct 2026 | CVSS 8.8 | Grid Protection Alliance openPDCA component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An… | |
| CVE-2026-105281 | 9 Oct 2026 | CVSS 7.5 | Grid Protection Alliance openPDCThe internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network… | |
| CVE-2026-101022 | 9 Oct 2026 | CVSS 4.3 | Grid Protection Alliance openPDCA Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be… | |
| CVE-2026-100730 | 9 Oct 2026 | CVSS 9.8 | Grid Protection Alliance openPDCA service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an… |