Carlo Gavazzi Automation YL212CPN8M1IO

• CVE-2026-27565 Critical 9.8 Remote code execution via uploading a malicious IODD file 1.0%
• CVE-2026-27564 High 7.2 Command Injection via PUT in /api/datastorage/data 2.7%
• CVE-2026-27563 High 7.2 Command Injection via GET in /api/datastorage/data 2.7%
• CVE-2026-27562 High 7.2 Command Injection via PUT in /api/iodd/config 2.7%
• CVE-2026-27561 High 7.2 Command Injection via GET in /api/iodd/config 2.7%
• CVE-2026-27560 High 7.2 Command Injection via DELETE in /api/status/data 2.7%
• CVE-2026-27559 High 8.8 Command Injection via GET in /api/status/data 2.9%
• CVE-2026-27558 High 8.8 Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files 2.9%
• CVE-2026-27557 High 7.5 Path Traversal in /index.php/view_uploaded_iodd_file 0.7%
• CVE-2026-27556 High 8.8 Local File Inclusion in /index.php/ajax/save_iodd_parameters 0.9%
• CVE-2026-27555 High 8.8 Local File Inclusion in /index.php/ajax/get_iodd_port_info 0.9%
• CVE-2026-27554 High 8.8 Command Injection in /index.php/ajax/save_iodd_parameters 2.9%
• CVE-2026-27553 Medium 6.5 Information Disclosure via Schema Path Manipulation 0.6%
• CVE-2026-27552 High 8.1 Unauthorized IODD File Upload due to Improper Authorization 0.6%
• CVE-2026-27551 High 8.8 Command Injection in /index.php/ajax/parameterManage 2.9%
• CVE-2026-27550 High 8.8 Command Injection in Field_Shadow_Password Class 2.9%
• CVE-2026-27549 High 8.8 Command Injection in /index.php/attached_devices_tab/do_upload 2.9%
• CVE-2026-27548 High 8.8 Command Injection in /index.php/ajax/get_iodd_port_info 2.9%
• CVE-2026-27547 High 8.8 Command Injection in /index.php/ajax/get_iodd_menu_info 2.9%
• CVE-2026-27546 Critical 9.8 Authentication Bypass in _account_log 1.0%