YN115CPN8RPIO
- Software type
- Other
- Total vulnerabilities (90 days)
- 20
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/06/2026, YN115CPN8RPIO recorded 20 security vulnerabilities in the last 90 days, of which 19 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of YN115CPN8RPIO and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-27565Root-level command execution via malicious IODD upload in Pepperl+Fuchs, Phoenix Contact, and Carlo Gavazzi Automation devicesCVE-2026-27564Command Injection via PUT in /api/datastorage/dataCVE-2026-27563Command Injection via GET in /api/datastorage/dataCVE-2026-27562Command Injection via PUT in /api/iodd/configCVE-2026-27561Command Injection via GET in /api/iodd/config| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-27565Root-level command execution via malicious IODD upload in Pepperl+Fuchs, Phoenix Contact, and Carlo Gavazzi Automation devices | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2026-27564Command Injection via PUT in /api/datastorage/data | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27563Command Injection via GET in /api/datastorage/data | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27562Command Injection via PUT in /api/iodd/config | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27561Command Injection via GET in /api/iodd/config | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27560Command Injection via DELETE in /api/status/data | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27559Command Injection via GET in /api/status/data | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27558Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27557Path Traversal in /index.php/view_uploaded_iodd_file | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27556Local File Inclusion in /index.php/ajax/save_iodd_parameters | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27555Local File Inclusion in /index.php/ajax/get_iodd_port_info | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27554Command Injection in /index.php/ajax/save_iodd_parameters | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27553Information Disclosure via Schema Path Manipulation | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-27552Unauthorized IODD File Upload due to Improper Authorization | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27551Command Injection in /index.php/ajax/parameterManage | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27550Command Injection in Field_Shadow_Password Class | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27549Command Injection in /index.php/attached_devices_tab/do_upload | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27548Command Injection in /index.php/ajax/get_iodd_port_info | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27547Command Injection in /index.php/ajax/get_iodd_menu_info | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityHigh |
|---|
CVE-2026-27546Authentication Bypass in _account_log | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityCritical |
|---|
20 Results | Page 1 of 1