CVE

CVE-2021-26829

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC · ScadaBR

Date added (CISA)

2025-11-28

Remediation due

2025-12-19

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.