CVE-2026-27548

HighCVSS 8.8/10Last modified Sep 18, 2026

Description

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using user or operator credentials allowing execution of commands with root privileges on the device.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Pepperl+FuchsICE2-8IOL1-G65L-V1D>= 1.0.0, < 1.7.4
Pepperl+FuchsICE2-8IOL-G65L-V1D>= 1.0.0, < 1.7.4
Pepperl+FuchsICE2-8IOL-K45P-RJ45>= 1.0.0, < 1.7.4
Pepperl+FuchsICE2-8IOL-K45S-RJ45>= 1.0.0, < 1.7.4
Pepperl+FuchsICE3-8IOL1-G65L-V1D>= 1.0.0, < 1.7.4
Pepperl+FuchsICE3-8IOL-G65L-V1D>= 1.0.0, < 1.7.4
Pepperl+FuchsICE3-8IOL-G65L-V1D-Y>= 1.0.0, < 1.7.4
Pepperl+FuchsICE3-8IOL-K45P-RJ45>= 1.0.0, < 1.7.4
Pepperl+FuchsICE3-8IOL-K45S-RJ45>= 1.0.0, < 1.7.4
Phoenix ContactIOL MA8 PN DI8>= 1.0.0, < 1.7.4
Phoenix ContactIOL MA8 EIP DI8>= 1.0.0, < 1.7.4
Carlo Gavazzi AutomationYL212CEI8M1IO>= 1.0.0, < 1.7.4
Carlo Gavazzi AutomationYN115CEI8RPIO>= 1.0.0, < 1.7.4
Carlo Gavazzi AutomationYL212CPN8M1IO>= 1.0.0, < 1.7.4
Carlo Gavazzi AutomationYN115CPN8RPIO>= 1.0.0, < 1.7.4

References

Timeline

Published
Sep 16, 2026
Last modified
Sep 18, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-275498.8A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint usiCVE-2026-275508.8A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using operator credentialsCVE-2026-275518.8A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user crCVE-2026-275528.1A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODDCVE-2026-275536.5A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint usCVE-2026-275548.8A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using opCVE-2026-275558.8A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using aCVE-2026-275568.8A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint usingCVE-2026-275577.5An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing thCVE-2026-275588.8A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iCVE-2026-275598.8A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET reqCVE-2026-27565.0A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Inter
CVE-2026-27548: High severity, CVSS 8.8 | Vulnix