CVE-2026-27552

A low-privileged remote attacker can exploit improper authorization in the /index.php/attacheddevicestab/doupload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes...

CVE-2026-27552

CVE-2026-27552 is a high-severity vulnerability (CVSS 3.1: 8.1) involving improper authorization in the /index.php/attached_devices_tab/do_upload endpoint. A low-privileged remote attacker can exploit this flaw to upload IODD files to the device, potentially altering device behavior or causing sy...

CVE-2026-27549

CVE-2026-27549 is a command injection vulnerability in the /index.php/attached_devices_tab/do_upload endpoint. A remote attacker with low-privileged operator credentials can inject commands that execute with root privileges on the device. The CVSS 3.1 score is 8.8 (HIGH) , reflecting network vect...

EUVD-2026-80232

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attacheddevicestab/doupload endpoint using operator credentials allowing execution of commands with root privileges on the device...