← Back to browse · API

CVE-2021-26828

Severity
HIGH
CVSS
8.8
EPSS
0.39356
Risk score
73.97
CISA KEV
Yes
PoC
No
Published
2021-06-11
Modified
2025-12-04
First seen
2026-08-07
Aliases
EUVD-2021-13613, GHSA-J87G-5G8X-JJXC
Products
OpenPLC:ScadaBR, n/a:n/a n/a
Sources
euvd EUVD-2021-13613
cisa.gov CVE-2021-26828

Description

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

References