CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,435 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,435
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product carlo_gavazzi_automation:yn115cei8rpio. Show all products

20 CVEs, showing 1 to 20
CVESeverityTitlePublished
CVE-2026-27565Critical 9.8Remote code execution via uploading a malicious IODD file
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27564High 7.2Command Injection via PUT in /api/datastorage/data
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27563High 7.2Command Injection via GET in /api/datastorage/data
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27562High 7.2Command Injection via PUT in /api/iodd/config
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27561High 7.2Command Injection via GET in /api/iodd/config
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27560High 7.2Command Injection via DELETE in /api/status/data
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27559High 8.8Command Injection via GET in /api/status/data
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27558High 8.8Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27557High 7.5Path Traversal in /index.php/view_uploaded_iodd_file
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27556High 8.8Local File Inclusion in /index.php/ajax/save_iodd_parameters
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27555High 8.8Local File Inclusion in /index.php/ajax/get_iodd_port_info
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27554High 8.8Command Injection in /index.php/ajax/save_iodd_parameters
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27553Medium 6.5Information Disclosure via Schema Path Manipulation
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27552High 8.1Unauthorized IODD File Upload due to Improper Authorization
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27551High 8.8Command Injection in /index.php/ajax/parameterManage
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27550High 8.8Command Injection in Field_Shadow_Password Class
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27549High 8.8Command Injection in /index.php/attached_devices_tab/do_upload
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27548High 8.8Command Injection in /index.php/ajax/get_iodd_port_info
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27547High 8.8Command Injection in /index.php/ajax/get_iodd_menu_info
Assigned by CERTVDE
Sep 16, 2026
CVE-2026-27546Critical 9.8Authentication Bypass in _account_log
Assigned by CERTVDE
Sep 16, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.