Vulnerability intelligence
CVE-2026-85479
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
CVSS Score
6.9
Medium
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-10-09
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Oct 9, 2026 · latest Oct 9, 2026
Coverage timeline
-
CISA Urges Patching of Critical Flaws in Energy Sector Softwaresecurityonline.info · Oct 9, 2026