Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2021-26828 — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
|
OpenPLC | ScadaBR | Dec 3, 2025 | Dec 24, 2025 | |
|
CVE-2021-26829 — OpenPLC ScadaBR Cross-site Scripting Vulnerability
OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
|
OpenPLC | ScadaBR | Nov 28, 2025 | Dec 19, 2025 |
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
ScadaBR · Dec 3, 2025
OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
ScadaBR · Nov 28, 2025