CVE-2026-27558Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
Updated under an hour ago ()
Does this affect you?
It affects Pepperl+Fuchs ICE2-8IOL1-G65L-V1D and 14 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator credentials allowing execution of commands with root privileges on the device.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-78
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- CERTVDE
- NVD analysis
- Awaiting Analysis
- Record last updated
- Sep 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Pepperl+Fuchs ICE2-8IOL1-G65L-V1D pepperl+fuchs:ice2_8iol1_g65l_v1d (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE2-8IOL-G65L-V1D pepperl+fuchs:ice2_8iol_g65l_v1d (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE2-8IOL-K45P-RJ45 pepperl+fuchs:ice2_8iol_k45p_rj45 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE2-8IOL-K45S-RJ45 pepperl+fuchs:ice2_8iol_k45s_rj45 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE3-8IOL1-G65L-V1D pepperl+fuchs:ice3_8iol1_g65l_v1d (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE3-8IOL-G65L-V1D pepperl+fuchs:ice3_8iol_g65l_v1d (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE3-8IOL-G65L-V1D-Y pepperl+fuchs:ice3_8iol_g65l_v1d_y (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE3-8IOL-K45P-RJ45 pepperl+fuchs:ice3_8iol_k45p_rj45 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Pepperl+Fuchs ICE3-8IOL-K45S-RJ45 pepperl+fuchs:ice3_8iol_k45s_rj45 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Phoenix Contact IOL MA8 PN DI8 phoenix_contact:iol_ma8_pn_di8 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Phoenix Contact IOL MA8 EIP DI8 phoenix_contact:iol_ma8_eip_di8 (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Carlo Gavazzi Automation YL212CEI8M1IO carlo_gavazzi_automation:yl212cei8m1io (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Carlo Gavazzi Automation YN115CEI8RPIO carlo_gavazzi_automation:yn115cei8rpio (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Carlo Gavazzi Automation YL212CPN8M1IO carlo_gavazzi_automation:yl212cpn8m1io (from the name) | from 1.0.0 before 1.7.4 | CNA record |
Carlo Gavazzi Automation YN115CPN8RPIO carlo_gavazzi_automation:yn115cpn8rpio (from the name) | from 1.0.0 before 1.7.4 | CNA record |
References
- https://www.certvde.com/en/advisories/VDE-2026-014/
- https://www.certvde.com/en/advisories/VDE-2026-027/
- https://www.certvde.com/en/advisories/VDE-2026-028/
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.