Arbitrary File Upload Vulnerability in OpenPLC_V3 by Thiago Alves

CVE-2025-1066

What is CVE-2025-1066?

The OpenPLC_V3 software contains an arbitrary file upload vulnerability that allows malicious actors to upload potentially harmful files. This vulnerability can be exploited to execute malicious scripts or deploy payloads, which may be used for further attacks, such as phishing or malvertising campaigns. Users of OpenPLC_V3 should take immediate action to mitigate risks associated with this vulnerability by implementing security best practices and keeping their software up to date.

References