OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

OpenPLC ScadaBR contains an unrestricted file upload vulnerability (CVE-2021-26828) that allows remote authenticated users to upload and execute arbitrary JSP files via the view_edit.shtm endpoint. This vulnerability affects the open-source SCADA system and could potentially impact other products that use similar components. The flaw enables attackers with valid credentials to achieve code execution by uploading malicious JSP files without proper validation or restrictions on file types.