The U.S. Cybersecurity and Infrastructure Security Agency
(CISA) has updated its Known Exploited Vulnerabilities (KEV)
catalog to include a security flaw impacting OpenPLC ScadaBR,
citing evidence of active exploitation. The vulnerability in
question is CVE-2021-26829 (CVSS score: 5.4), a cross-site
scripting (XSS) flaw that affects Windows and Linux versions of the
software via
Read more https://thehackernews.com/2025/11/cisa-adds-actively-exploited-xss-bug.html

