Carlo Gavazzi Automation

Products

ProductCVEsExploitedLatest
YL212CEI8M1IO20–Sep 16, 2026
YL212CPN8M1IO20–Sep 16, 2026
YN115CEI8RPIO20–Sep 16, 2026
YN115CPN8RPIO20–Sep 16, 2026

Exploited and recent CVEs

  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
  • CVE-2026-27558 High 8.8 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files 2.9%
  • CVE-2026-27558 High 8.8 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files 2.9%