OpenPLC 2

Organization

CVE-2021-26828: OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Dec 03, 2025

OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

Vulnerabilities & Patching

CVE-2021-26829: OpenPLC ScadaBR Cross-site Scripting Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 28, 2025

OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.

Vulnerabilities & Patching