CVE-2026-27556

published 2026-09-16

CVE-2026-27556: A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator…

Priority P2 59 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
carlo_gavazzi_automation	yl212cei8m1io	>= 1.0.0 < 1.7.4	1.7.4
carlo_gavazzi_automation	yl212cpn8m1io	>= 1.0.0 < 1.7.4	1.7.4
carlo_gavazzi_automation	yn115cei8rpio	>= 1.0.0 < 1.7.4	1.7.4
carlo_gavazzi_automation	yn115cpn8rpio	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice2-8iol-g65l-v1d	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice2-8iol-k45p-rj45	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice2-8iol-k45s-rj45	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice2-8iol1-g65l-v1d	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice3-8iol-g65l-v1d	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice3-8iol-g65l-v1d-y	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice3-8iol-k45p-rj45	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice3-8iol-k45s-rj45	>= 1.0.0 < 1.7.4	1.7.4
pepperl+fuchs	ice3-8iol1-g65l-v1d	>= 1.0.0 < 1.7.4	1.7.4
phoenix_contact	iol_ma8_eip_di8	>= 1.0.0 < 1.7.4	1.7.4
phoenix_contact	iol_ma8_pn_di8	>= 1.0.0 < 1.7.4	1.7.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-98