MSRXVendors / OpenPLC
OpenPLC vulnerabilities being exploited
2 OpenPLC flaws were confirmed exploited in the wild in the past 365 days, across 1 product: ScadaBR. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2025-12-03 | CVE-2021-26828 ScadaBR OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. | 2025-12-24 |
| 2025-11-28 | CVE-2021-26829 ScadaBR OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm. | 2025-12-19 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.