Vulnerability intelligence

CVE-2026-105278

Grid Protection Alliance openPDC (Docker image) CWE-798

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories