HighVulnerabilityCVE-2026-102508updated 30 Oct 2026, 19:01 UTC

Apache PLC4X OPC UA client: signature bypass and certificate validation flaws

1 source, unconfirmed

Severity	HighVulnerability
Being exploited?	UnclearNo reports either way yet
Fix available?	UnclearNo fixed version published in the sources yet
How sure is this?	1 source, unconfirmedOnly one publisher so far, details may change

Timeline

30 Oct 2026, 18:45 UTC
Publicly disclosed
30 Oct 2026, 18:45 UTC
Reported by oss-security · oss-security
30 Oct 2026, 19:01 UTC
Picked up by Zero Radar

Sources 1 report, oldest first

Security researchers research teams and mailing lists

Re: CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgradeoss-security · 30 Oct 2026, 18:45 UTC

Technical details

ID: CVE-2026-102508
Disclosed: 30 Oct 2026, 18:45 UTC
On Zero Radar: 30 Oct 2026, 19:01 UTC (16 min after disclosure)
Last change: 30 Oct 2026, 19:01 UTC

This entry has not been explained yet. The text comes straight from the source. How Zero Radar works

Apache PLC4X OPC UA client: signature bypass and certificate validation flaws · Zero Radar