CVE-2026-88020: Autonomy Logic OpenPLC Runtime

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding.

Affected products

• Autonomy Logic OpenPLC Runtime: version 3 only

Published 2026-09-22. Last modified 2026-09-23.