← Incidents
INCIDENT 631PhishingLOW / UNDER REVIEWSourced
OpenPLC Runtime v3
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-265-09.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue state-changing requests as an operator which would allow the attacker to control the programmable logic controller and the physical processes it drives.</strong></p> <p>The following versions of OpenPLC Runtime v3 are affected:</p> <ul> <li>OpenPLC 3 (CVE-2026-88020)</li> </ul> <div class="csaf-table"> <table class="tablesaw…
Last evidence update
22 SEP 2026 · 12:00 UTC
Source count
1
Status
reported
United StatesManufacturingEnergyUtilitiesTransportationDefenseCVE-2026-88020
Observation history
How this record has evolved as evidence accumulated.
23 SEP · 05:22 UTC
Initial report
Evidence