CVE-2026-275577.5HighCWE-35
Path Traversal in /index.php/view_uploaded_iodd_file
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
Not in CISA KEVVendor fix available
0.7%probability of exploitation in the next 30 days
53rd percentile
050100
Higher than 53% of scored CVEs
7.5HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- Critical flaws let attackers seize industrial controllers from three vendorsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.