CVE-2026-27552 | ICE2-8IOL1-G65L-V1D up to 1.7.3 IODD File Upload index.php improper authorization

A vulnerability has been found in Pepperl+Fuchs/Phoenix Contact/Carlo Gavazzi Automation ICE2-8IOL1-G65L-V1D, ICE2-8IOL-G65L-V1D, ICE2-8IOL-K45P-RJ45, ICE2-8IOL-K45S-RJ45, ICE3-8IOL1-G65L-V1D, ICE3-8IOL-G65L-V1D, ICE3-8IOL-G65L-V1D-Y, ICE3-8IOL-K45P-RJ45, ICE3-8IOL-K45S-RJ45, IOL MA8 PN DI8, IOL MA8 EIP DI8, YL212CEI8M1IO, YN115CEI8RPIO, YL212CPN8M1IO and YN115CPN8RPIO up to 1.7.3 and classified as problematic. Affected by this issue is some unknown functionality of the file index.php of the component IODD File Upload. The manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-27552. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More