CVE-2026-105281 — Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this i…
Published: 2026-10-09 · CVSS: 8.7 · CVSS 4.0
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7