CVE-2026-27563

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Sep 16, 2026
Source updated: Sep 18, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Command Injection via GET in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials allowing execution of commands with root privileges on the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ICE2-8IOL1-G65L-V1D

Vendor: Pepperl+Fuchs
Product: ICE2-8IOL1-G65L-V1D
Platforms: Unknown
Default status: unaffected

ICE2-8IOL1-G65L-V1D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE2-8IOL-G65L-V1D

Vendor: Pepperl+Fuchs
Product: ICE2-8IOL-G65L-V1D
Platforms: Unknown
Default status: unaffected

ICE2-8IOL-G65L-V1D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE2-8IOL-K45P-RJ45

Vendor: Pepperl+Fuchs
Product: ICE2-8IOL-K45P-RJ45
Platforms: Unknown
Default status: unaffected

ICE2-8IOL-K45P-RJ45 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE2-8IOL-K45S-RJ45

Vendor: Pepperl+Fuchs
Product: ICE2-8IOL-K45S-RJ45
Platforms: Unknown
Default status: unaffected

ICE2-8IOL-K45S-RJ45 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE3-8IOL1-G65L-V1D

Vendor: Pepperl+Fuchs
Product: ICE3-8IOL1-G65L-V1D
Platforms: Unknown
Default status: unaffected

ICE3-8IOL1-G65L-V1D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE3-8IOL-G65L-V1D

Vendor: Pepperl+Fuchs
Product: ICE3-8IOL-G65L-V1D
Platforms: Unknown
Default status: unaffected

ICE3-8IOL-G65L-V1D · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE3-8IOL-G65L-V1D-Y

Vendor: Pepperl+Fuchs
Product: ICE3-8IOL-G65L-V1D-Y
Platforms: Unknown
Default status: unaffected

ICE3-8IOL-G65L-V1D-Y · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE3-8IOL-K45P-RJ45

Vendor: Pepperl+Fuchs
Product: ICE3-8IOL-K45P-RJ45
Platforms: Unknown
Default status: unaffected

ICE3-8IOL-K45P-RJ45 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

ICE3-8IOL-K45S-RJ45

Vendor: Pepperl+Fuchs
Product: ICE3-8IOL-K45S-RJ45
Platforms: Unknown
Default status: unaffected

ICE3-8IOL-K45S-RJ45 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

IOL MA8 PN DI8

Vendor: Phoenix Contact
Product: IOL MA8 PN DI8
Platforms: Unknown
Default status: unaffected

IOL MA8 PN DI8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

IOL MA8 EIP DI8

Vendor: Phoenix Contact
Product: IOL MA8 EIP DI8
Platforms: Unknown
Default status: unaffected

IOL MA8 EIP DI8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

YL212CEI8M1IO

Vendor: Carlo Gavazzi Automation
Product: YL212CEI8M1IO
Platforms: Unknown
Default status: unaffected

YL212CEI8M1IO · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

YN115CEI8RPIO

Vendor: Carlo Gavazzi Automation
Product: YN115CEI8RPIO
Platforms: Unknown
Default status: unaffected

YN115CEI8RPIO · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

YL212CPN8M1IO

Vendor: Carlo Gavazzi Automation
Product: YL212CPN8M1IO
Platforms: Unknown
Default status: unaffected

YL212CPN8M1IO · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed

YN115CPN8RPIO

Vendor: Carlo Gavazzi Automation
Product: YN115CPN8RPIO
Platforms: Unknown
Default status: unaffected

YN115CPN8RPIO · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	1.7.4	Unavailable	None listed