OpcUaTrap

OpcUaTrap A high-interaction OPC UA honeypot for ICS/SCADA environments. Built on LibUA — a full OPC UA Binary stack, not a protocol emulator. Simulates realistic industrial control systems across multiple industry profiles with live process values, comprehensive threat detection, and SIEM-ready...

ICS-TestBed-Framework

ICS TestBed Framework A scalable framework for automatically deploying locally or remotely a number of virtual machines that replicate a Supervisory Control And Data Acquisition SCADA network is proposed. This includes multiple virtual hosts emulating sensors and actuators, with a Human Machine...

stack-overflow-poc

CVE-2018-12086 PoC https://nvd.nist.gov/vuln/detail/CVE-2018-12086 https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2018-12086.pdf TL;DR: some OPC UA stacks are vulnerable to a stack overflow when decoding specially crafted requests. Build mvn clean package...

CVE-2026-95860: node-opcua: node-opcua is an OPC UA implementation for TypeScript and Node.js

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions...

CVE-2026-116014

A flaw was found in open62541. This vulnerability allows a malicious Open Platform Communications Unified Architecture OPC UA server to trigger arbitrary code execution or a Denial of Service DoS on connecting client applications. By supplying specially crafted, oversized custom data type...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE """atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient import sys, os, json, random, hashlib,...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

CVE-2026-102509

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102508

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509

The Apache PLC4X (PLC4J) Java implementation is vulnerable to pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser . The root causes include memory allocation with excessive size values, allocation of resources without limits, and uncontrolled recursion. Specificall...

CVE-2026-102508 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-102508

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

EUVD-2026-89674

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-102508

The Apache PLC4X (PLC4J) OPC UA driver is vulnerable to integrity bypass , unverifiable server certificates , and silent downgrades in versions 0.9.0 through 0.13.1 . The root cause involves improper cryptographic signature verification and lack of trust anchors: versions 0.9.0–0.11.0 fail to enf...

CVE-2026-102508 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

PT-2026-103051

Name of the Vulnerable Software and Affected Versions Apache PLC4X versions 0.9.0 through 0.13.1 Description Improper verification of cryptographic signatures and improper certificate validation in the OPC UA driver PLC4J allow a network attacker to impersonate the OPC UA server. This enables the...

CVE-2026-102508: Improper Verification of Cryptographic Signature

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...