Security News CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV TheHackerNews Daniel Bender 30 Nov 2025 CISA flags active exploitation of CVE-2021-26829 as TwoNet and OAST operations drive widespread scanning.