CVE-2026-22317

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Phoenix ContactFL SWITCH 2005>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2008>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2016>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2105>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2108>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2116>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2204-2TC-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2205>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2FX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2FX SM>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2FX SM ST>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2FX ST>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206-2SFX PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2206C-2FX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2207-FX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2207-FX SM>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2208>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2208 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2208C>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2212-2TC-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2214-2FX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2214-2FX SM>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2214-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2214-2SFX PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2216>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2216 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2304-2GC-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2306-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2306-2SFP PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2308>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2308 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2312-2GC-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2314-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2314-2SFP PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2316>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2316 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2404-2TC-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2406-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2406-2SFX PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2408>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2408 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2412-2TC-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2414-2SFX>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2414-2SFX PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2416>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2416 PN>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2504-2GC-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2506-2SFP>= 0.0.0, < 3.53
Phoenix ContactFL SWITCH 2506-2SFP PN>= 0.0.0, < 3.53

References

Timeline

Published
Mar 18, 2026
Last modified
Jun 17, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-223184.9A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversCVE-2026-223194.9A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parametersCVE-2026-22327.5The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' paraCVE-2026-223206.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trCVE-2026-223215.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpCVE-2026-223227.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker CVE-2026-223237.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users CVE-2026-223248.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania alCVE-2026-223258.1Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.CVE-2026-223268.1Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.CVE-2026-223279.9Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.CVE-2026-223287.1Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
CVE-2026-22317: High severity, CVSS 7.2 | Vulnix