tldrdailynews.com logo

CISA Adds OpenPLC ScadaBR XSS Vulnerability to KEV Amid Exploits

1 min read
Source: The Hacker News
CISA Adds OpenPLC ScadaBR XSS Vulnerability to KEV Amid Exploits
Photo: The Hacker News
TL;DR

CISA has added the actively exploited CVE-2021-26829 XSS vulnerability in OpenPLC ScadaBR to its KEV catalog, highlighting ongoing threats from hacktivist groups like TwoNet, which exploited this flaw in a honeypot to deface a system. The attack involved using default credentials and web application layer exploits, with federal agencies required to patch by December 19, 2025. Additionally, a long-running exploit operation targeting Brazil has been observed, utilizing legitimate cloud infrastructure to evade detection.

Topics:businesscybersecurity#cisa#cve-2021-26829#cybersecurity#exploitation#openplc-scadabr#xss
Share this article
  1. CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV  The Hacker News
  2. CISA adds four-year-old ScadaBR vulnerability to KEV Catalog  Cyber Daily
  3. CISA Adds CVE-2021-26829 to KEV Catalog Amid Russian Hacktivist Exploits  WebProNews
  4. CISA Warns of OpenPLC ScadaBR cross-site scripting vulnerability Exploited in Attacks  CybersecurityNews
  5. CISA Warns of OpenPLC ScadaBR Vulnerability Exploitation  Red Hot Cyber

Want the full story? Read the original reporting

Read on The Hacker News