CVE-2021-26828 OpenPLC ScadaBR
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
- CVSS
- not scored
On CISA’s exploited list
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
- Added
- 2025-12-03
- Federal patch deadline
- 2025-12-24
- Ransomware use
- not known