A vulnerability classified as critical has been found in thiagoralves OpenPLC v3 up to 9cd8f1b53a50f9d38708096bfc72bcbb1ef47343. Affected is an unknown function of the file /edit-user. The manipulation leads to unrestricted upload.
This vulnerability is traded as CVE-2025-54962. It is possible to launch the attack remotely. There is no exploit available.
