Vulnerability intelligence

CVE-2026-105281

Grid Protection Alliance openPDC CWE-306

The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.

CVSS Score

8.7

High

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories