CVE-2026-275659.8CriticalCWE-78
Remote code execution via uploading a malicious IODD file
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
Not in CISA KEVVendor fix available
1.0%probability of exploitation in the next 30 days
61st percentile
050100
Higher than 61% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- Critical flaws let attackers seize industrial controllers from three vendorsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.