Ics — PoC Archivehttps://poc.intelseclab.com/tags/ics/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000OpenPLC_v3 glue_generator Path Traversal — CVE-2026-31156https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-31156-openplc-glue-generator-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-31156-openplc-glue-generator-traversal/High severity — hardware · CVE-2026-31156. Status: PoC. Affects: OpenPLC_v3 — utils/glue_generator_src/glue_generator.cpp build/code-generation utility. Tags: openplc, ics, path-traversal, arbitrary-file-write, glue-generator, cpp, plc, industrial-control.hardwareHighopenplcicspath-traversalarbitrary-file-writeglue-generatorcppplcindustrial-controlFUXA SCADA/HMI — Unauthenticated Path Traversal to Remote Code Execution (CVE-2026-25895)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25895-fuxa-path-traversal-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25895-fuxa-path-traversal-rce/Critical severity (CVSS 9.8) — web · CVE-2026-25895. Status: Weaponized. Affects: FUXA (Node.js-based SCADA/HMI platform), frangoteam. Tags: fuxa, scada, ics, path-traversal, arbitrary-file-write, rce, unauthenticated, cwe-22, cron-persistence, webshell.webCriticalfuxascadaicspath-traversalarbitrary-file-writerceunauthenticatedcwe-22cron-persistencewebshellErlang/OTP SSH Pre-Auth RCE - CVE-2025-32433https://poc.intelseclab.com/pocs/network/2026-05-17_erlang-otp-ssh-preauth-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-17_erlang-otp-ssh-preauth-rce/Critical severity (CVSS 10) — network · CVE-2025-32433. Status: Patched. Affects: Erlang/OTP SSH server daemon. Tags: RCE, pre-auth, unauthenticated, SSH, Erlang, OTP, RabbitMQ, CouchDB, ICS, OT, reverse-shell, in-the-wild.networkCriticalRCEpre-authunauthenticatedSSHErlangOTPRabbitMQCouchDBICSOTreverse-shellin-the-wild