Skip to content

OpenPLC

In 1 brief, most recently 1 December 2025. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

2 OpenPLC vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability added 2025-12-03
CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability added 2025-11-28

Coverage in DanSec Daily

Mon 01 Dec Asahi breach hitting up to 1.9M people, actively exploited OpenPLC ScadaBR XSS flaw added to CISA KEV, and Tomiris's stealthier C2 implants.