Will Grid Protection Alliance openPDC/openHistorian CVEs (CVE-2026-104629 et al.) be actively exploited by year-end 2026?

CISA alert (Oct 8, 2026) discloses five critical CVEs in Grid Protection Alliance openPDC and openHistorian affecting versions prior to 2.9.477/2.9.482. These utilities are used in power grid monitoring and historical data systems. Resolution: public proof of active exploitation (PoC, incident reports, threat intel) from reputable sources (CISA, vendors, security firms).

Resolution Criteria

Active exploitation must be confirmed by CISA alert update, vendor security advisory, or credible threat intelligence report (e.g., Shodan scanning, honeypot activity, or documented attack case study) naming one of the five CVEs and demonstrating compromise or functional RCE/DoS against affected Grid Protection Alliance product versions.