The Cybersecurity and Infrastructure Security Agency (CISA), a division of the U.S. Department of Homeland Security, has added a four-year-old ScadaBR OpenPLC cross-site scripting (XSS) vulnerability to its Known Exploited Vulnerabilities catalog.

Given that this vulnerability is being actively exploited, CISA's action serves as a critical reminder for operators to accelerate patching efforts—reinforcing demand for cybersecurity providers such as Palo Alto Networks (PANW).