U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

Securityaffairs.Co •Pierluigi Paganini • December 1, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OpenPLC ScadaBR flaw, tracked as CVE-2021-26829 (CVSS score of 5.4), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is a cross-site scripting (XSS) flaw that impacts Windows and Linux versions via system_settings.shtm. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of OpenPLC ScadaBR Vulnerability CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities catalog due to active exploitation of the OpenPLC ScadaBR vulnerability. This vulnerability affects systems using OpenPLC ScadaBR, posing risks to operational technology environments. 7 sources 39

Extracted Entities

U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

The full story

Extracted Entities

CVEs (1)

Platforms (2)

Vulnerabilities (2)