<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 10 Oct 2026 23:37:46 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-105281 — Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-105281</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Grid Protection Alliance openPDC, Grid Protection Alliance openPDC (Docker image), Grid Protection Alliance openHistorian&lt;/p&gt;
&lt;p&gt;The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Grid Protection Alliance openPDC, Grid Protection Alliance openPDC (Docker image), Grid Protection Alliance openHistorian&lt;/p&gt;
&lt;p&gt;The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-105281</guid>
    </item>
  </channel>
</rss>
