CVE-2025-54962

Publication date

2025-08-04 00:00:00

Family

mitre

State

PUBLISHED

Description

/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible under the /static URI.