cve.bz

CVE-2021-26828

8.8 highKEVEPSS 39%

High (8.8) in OpenPLC ScadaBR. In CISA KEV since 2025-12-03. EPSS 39% chance of exploitation in the next 30 days.

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
39% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2025-12-03, due 2025-12-24
CWE
CWE-434
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON