ACTIEF MISBRUIKT

CVE-2021-26828: OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Gegevens
Leverancier	OpenPLC
Product	ScadaBR
Actief misbruikt	Ja
Toegevoegd aan CISA KEV	3 dec 2025
CISA-deadline (Amerikaanse overheid)	24 dec 2025
Zwakte (CWE)	CWE-434

Vereiste actie (tekst van CISA, Engels)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Beschrijving (NVD, Engels)

OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

BRONNEN

CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij OpenPLC

CVE-2021-26829: OpenPLC ScadaBR Cross-site Scripting Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.