Post

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV

Posted
By ictsec.pl
1 min read

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include a security flaw impacting OpenPLC ScadaBR, citing evidence of active exploitation.

The vulnerability in question is CVE-2021-26829 (CVSS score: 5.4), a cross-site scripting (XSS) flaw that affects Windows and Linux versions of the software via system_settings.shtm. It impacts the following versions:

  • OpenPLC ScadaBR through 1.12.4 on Windows
  • OpenPLC ScadaBR through 0.9.1 on Linux

In light of active exploitation, Federal Civilian Executive Branch (FCEB) agencies are required to apply the necessary fixes by December 19, 2025, for optimal protection.

To read the complete article see: The Hacker News …

SECURITY
CVE-2021-26829 XSS CISA OPENPLC SCADABR
This post is licensed under CC BY 4.0 by the author.