EUVD-2026-95779

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...

CVE-2026-100730

The Grid Protection Alliance openPDC and openHistorian software products contain a vulnerability in their service console interface. The flaw allows for the deserialization of untrusted data from a client-supplied data structure. On systems without Windows Authentication, an unauthenticated netwo...

PT-2026-108904

Name of the Vulnerable Software and Affected Versions openPDC affected versions not specified openHistorian affected versions not specified Description A service console interface deserializes a client-supplied data structure. This allows an attacker to trigger the deserialization of an arbitrary...