CVE-2026-85479 — Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this…
Published: 2026-10-09 · CVSS: 6.9 · CVSS 4.0
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7