CVE-2026-102511

Apache PLC4X is vulnerable to an improper verification of source during ADS discovery. In the PLC4Go implementation, an attacker can send spoofed UDP datagrams to force the host to derive connection addresses from the response body's AmsNetId instead of the actual source address. This allows an a...