Security Digest
OpenPLC: known exploited vulnerabilities
2 OpenPLC CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-12-03 | CVE-2021-26828 | OpenPLC ScadaBR OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 2025-12-24 |
| 2025-11-28 | CVE-2021-26829 | OpenPLC ScadaBR OpenPLC ScadaBR Cross-site Scripting Vulnerability | 2025-12-19 |