| CVE-2026-27565 |
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root…
|
9.8
Critical
|
Sep 16, 2026 |
| CVE-2026-27564 |
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-27563 |
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-27562 |
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-27561 |
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-27560 |
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by…
|
7.2
High
|
Sep 16, 2026 |
| CVE-2026-27559 |
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27558 |
A low-privileged remote attacker can exploit a command injection vulnerability in the…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27557 |
An unauthenticated remote attacker can exploit a path traversal vulnerability in the…
|
7.5
High
|
Sep 16, 2026 |
| CVE-2026-27556 |
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27555 |
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27554 |
A low-privileged remote attacker can exploit a command injection vulnerability in the…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27553 |
A low-privileged remote attacker can manipulate the schema path parameter in the…
|
6.5
Medium
|
Sep 16, 2026 |
| CVE-2026-27552 |
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload…
|
8.1
High
|
Sep 16, 2026 |
| CVE-2026-27551 |
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27550 |
A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27549 |
A low-privileged remote attacker can exploit a command injection vulnerability in the…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27548 |
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_port_info…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27547 |
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get_iodd_menu_info…
|
8.8
High
|
Sep 16, 2026 |
| CVE-2026-27546 |
An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an…
|
9.8
Critical
|
Sep 16, 2026 |