← All advisories

Medium severity5.4CISA KEVNVD Advisory· Published Jun 11, 2021· Updated Jun 17, 2026

CVE-2021-26829

CVE-2021-26829

Description

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Openplcproject/ScadaBRllm-create2 versions
0.9.1 on Linux, 1.12.4 on Windows+ 1 more
- (no CPE)range: 0.9.1 on Linux, 1.12.4 on Windows
- (no CPE)
Scadabr/Scadabr
cpe:2.3:a:scadabr:scadabr:*:*:*:*:*:*:*:*
Range: <=0.9.1

Patches

Vulnerability mechanics

References

4

youtu.be/Xh6LPCiLMa8nvdExploitThird Party Advisory
forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4nvdVendor Advisory
www.forescout.com/blog/anatomy-of-a-hacktivist-attack-russian-aligned-group-targets-otics/nvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

0

No linked articles in our index yet.