Security Advisory catalog CVE-2026-27556
cve-program · CVE-2026-27556 Published
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2026-27556 Published ICE2-8IOL1-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL1-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-K45P-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-K45P-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE2-8IOL-K45S-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE2-8IOL-K45S-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL1-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL1-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-G65L-V1D Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-G65L-V1D",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-G65L-V1D-Y Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-G65L-V1D-Y",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-K45P-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-K45P-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} ICE3-8IOL-K45S-RJ45 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "ICE3-8IOL-K45S-RJ45",
"vendor": "Pepperl+Fuchs",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} IOL MA8 PN DI8 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "IOL MA8 PN DI8",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} IOL MA8 EIP DI8 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "IOL MA8 EIP DI8",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YL212CEI8M1IO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YL212CEI8M1IO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YN115CEI8RPIO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YN115CEI8RPIO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YL212CPN8M1IO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YL212CPN8M1IO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} YN115CPN8RPIO Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "YN115CPN8RPIO",
"vendor": "Carlo Gavazzi Automation",
"versions": [
{
"lessThan": "1.7.4",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON