CVE-2026-35556

HIGH

Plaintext storage of a password in OpenPLC_V3

Title source: cna
STIX 2.1

Description

OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information.

Scores

CVSS v3 7.5
EPSS 0.0004
EPSS Percentile 11.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-256
Status published
Products (2)
OpenPLC_V3/OpenPLC_V3 All versions
openplcproject/openplc_v3_firmware
Published Apr 09, 2026
Tracked Since Apr 10, 2026