Vulnerability · Published Sep 18, 2026 · Assigned by VulnCheck

CVE-2026-81943PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE

Medium 6.7

In plain English

A medium-severity security flaw in PLANET IGS-5225-8P2T4S V1 from PLANET Technology Corp.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)6.7Medium

Exploit odds (30 days)0.2%top 91.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying operating system and gain root-level access.

Affected products (as reported)

Vendor	Product	Versions
PLANET Technology Corp.	PLANET IGS-5225-8P2T4S V1	0 – before 1.2412b260707
PLANET Technology Corp.	PLANET IGS-5225-8P2T4S V2	0 – before 2.2412b260519

Weakness: CWE-489 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

Vendor Advisory vendor-advisory, patch
https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-debug-mode-rce third-party-advisory