CVE-2026-27552 Unauthorized IODD File Upload due to Improper Authorization

A low-privileged remote attacker can exploit improper authorization in the /index.php/attacheddevicestab/doupload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes...

PT-2026-93351

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A low-privileged remote attacker with operator credentials can execute commands with root privileges on the device. This is possible through a command injection...