OpenPLC
Security incidents tagged OpenPLC. Newest first.
2 OpenPLC incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 323
- Longest quiet run: 323 days (Dec 4–Oct 22)
Show 2 older incidents2 older incidents
December 2025 1
HighOpenPLC ScadaBR: ScadaBR Unrestricted Upload of File with Dangerous Type VulnerabilityPatched
OpenPLC ScadaBR Patched
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. Added to CISA KEV on 2025-12-03.
Open incident →CVE-2021-26828
November 2025 1
MediumOpenPLC ScadaBR: ScadaBR Cross-site Scripting VulnerabilityPatched
OpenPLC ScadaBR Patched
OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm. Added to CISA KEV on 2025-11-28.
Open incident →CVE-2021-26829
