Grid Protection Alliance openPDC and openHistorian Flaws

Multiple critical vulnerabilities (six CVEs) were disclosed in Grid Protection Alliance openPDC and openHistorian used in energy sector operations; issues include deserialization of untrusted data enabling remote code execution, hard-coded credentials, SSRF, missing authentication, and unsafe reflection. Vendors released fixes (openPDC 2.9.482, openHistorian 2.8.585) and operators are advised to apply patches immediately, avoid the vendor Docker images in production, and isolate control networks; no confirmed active exploitation has been reported.