https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving OpenPLC.Sun, 26 Jul 2026 22:32:53 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-190-01cst-2262A critical vulnerability (CVE-2026-14480) in OpenPLC v3 allows authenticated attackers to write arbitrary files to the filesystem and achieve native code execution by injecting malicious C++ files into the runtime core directory. The flaw exists in the legacy web UI program-upload workflow, where user-supplied filenames are stored without validation and later used as destination paths. OpenPLC v3 is end-of-life and will not receive patches, with the vendor recommending users upgrade to OpenPLC v4.Thu, 09 Jul 2026 12:00:00 GMT