ZeusQA
Start free

Known exploited vulnerabilities

OpenPLC vulnerabilities attackers have used

Every OpenPLC vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 OpenPLC vulnerabilities as exploited in the wild, 2 of them added in the last 12 months. The most recent is CVE-2021-26828, added Dec 3, 2025. ScadaBR has the most entries (2).

In KEV, all time
2
Added, last 12 months
2
Used in ransomware
0
New CVEs this week
0

Every OpenPLC entry in CISA KEV

  1. CVE-2021-26828

    Added · due

    OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

    OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

  2. CVE-2021-26829

    Added · due

    OpenPLC ScadaBR Cross-site Scripting Vulnerability

    OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works