Autonomy Logic vulnerabilities

Products

• OpenPLC Runtime 2

Latest Autonomy Logic CVEs

Newest publication first

1. CVE-2026-88020 Improper Neutralization of Input During Web Page Generation in OpenPLC Runtime v3

   Published 2026-09-22

   Medium·CVSS 5.3 EPSS 0.27%

   Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding.

2. CVE-2025-34226 OpenPLC Runtime v3 Persistent DoS

   Published 2025-10-03

   High·CVSS 7.1 EPSS 0.68%

   OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime con...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.