CVE-2026-27555— Local File Inclusion in /index.php/ajax/get_iodd_port_info
Quick assessment
Affected
Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device.
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-27555
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local File Inclusion in /index.php/ajax/get_iodd_port_info
Source: CVE Program / CVE List V5
Vulnerability Description
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Pepperl+Fuchs | ICE2-8IOL1-G65L-V1D | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE2-8IOL-G65L-V1D | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE2-8IOL-K45P-RJ45 | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE2-8IOL-K45S-RJ45 | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE3-8IOL1-G65L-V1D | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE3-8IOL-G65L-V1D | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE3-8IOL-G65L-V1D-Y | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE3-8IOL-K45P-RJ45 | 1.0.0 ~ 1.7.4 | - |
|
| Pepperl+Fuchs | ICE3-8IOL-K45S-RJ45 | 1.0.0 ~ 1.7.4 | - |
|
| Phoenix Contact | IOL MA8 PN DI8 | 1.0.0 ~ 1.7.4 | - |
|
| Phoenix Contact | IOL MA8 EIP DI8 | 1.0.0 ~ 1.7.4 | - |
|
| Carlo Gavazzi Automation | YL212CEI8M1IO | 1.0.0 ~ 1.7.4 | - |
|
| Carlo Gavazzi Automation | YN115CEI8RPIO | 1.0.0 ~ 1.7.4 | - |
|
| Carlo Gavazzi Automation | YL212CPN8M1IO | 1.0.0 ~ 1.7.4 | - |
|
| Carlo Gavazzi Automation | YN115CPN8RPIO | 1.0.0 ~ 1.7.4 | - |
|
II. Public POCs for CVE-2026-27555
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-27555
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-27555 (3)
Same Patch Batch · Pepperl+Fuchs · 2026-09-16 · 20 CVEs total
| CVE-2026-27546 | 9.8 CRITICAL | Authentication Bypass in _account_log |
| CVE-2026-27565 | 9.8 CRITICAL | Remote code execution via uploading a malicious IODD file |
| CVE-2026-27550 | 8.8 HIGH | Command Injection in Field_Shadow_Password Class |
| CVE-2026-27559 | 8.8 HIGH | Command Injection via GET in /api/status/data |
| CVE-2026-27549 | 8.8 HIGH | Command Injection in /index.php/attached_devices_tab/do_upload |
| CVE-2026-27548 | 8.8 HIGH | Command Injection in /index.php/ajax/get_iodd_port_info |
| CVE-2026-27551 | 8.8 HIGH | Command Injection in /index.php/ajax/parameterManage |
| CVE-2026-27556 | 8.8 HIGH | Local File Inclusion in /index.php/ajax/save_iodd_parameters |
| CVE-2026-27554 | 8.8 HIGH | Command Injection in /index.php/ajax/save_iodd_parameters |
| CVE-2026-27547 | 8.8 HIGH | Command Injection in /index.php/ajax/get_iodd_menu_info |
| CVE-2026-27558 | 8.8 HIGH | Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files |
| CVE-2026-27552 | 8.1 HIGH | Unauthorized IODD File Upload due to Improper Authorization |
| CVE-2026-27557 | 7.5 HIGH | Path Traversal in /index.php/view_uploaded_iodd_file |
| CVE-2026-27560 | 7.2 HIGH | Command Injection via DELETE in /api/status/data |
| CVE-2026-27562 | 7.2 HIGH | Command Injection via PUT in /api/iodd/config |
| CVE-2026-27564 | 7.2 HIGH | Command Injection via PUT in /api/datastorage/data |
| CVE-2026-27563 | 7.2 HIGH | Command Injection via GET in /api/datastorage/data |
| CVE-2026-27561 | 7.2 HIGH | Command Injection via GET in /api/iodd/config |
| CVE-2026-27553 | 6.5 MEDIUM | Information Disclosure via Schema Path Manipulation |
IV. Related Vulnerabilities
Same product: ICE2-8IOL1-G65L-V1D
-
CVE-2026-27565
Remote code execution via uploading a malicious IODD file -
CVE-2026-27564
Command Injection via PUT in /api/datastorage/data -
CVE-2026-27563
Command Injection via GET in /api/datastorage/data -
CVE-2026-27562
Command Injection via PUT in /api/iodd/config -
CVE-2026-27561
Command Injection via GET in /api/iodd/config
Same vendor: Pepperl+Fuchs
-
CVE-2026-27565
Remote code execution via uploading a malicious IODD file -
CVE-2026-27564
Command Injection via PUT in /api/datastorage/data -
CVE-2026-27563
Command Injection via GET in /api/datastorage/data -
CVE-2026-27562
Command Injection via PUT in /api/iodd/config -
CVE-2026-27561
Command Injection via GET in /api/iodd/config
Same weakness: CWE-98
-
CVE-2026-27556
Local File Inclusion in /index.php/ajax/save_iodd_parameters -
CVE-2026-85200
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion -
CVE-2026-87927
MaxSite CMS through 109.6 Local File Inclusion via ajax disp -
CVE-2026-15667
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File -
CVE-2026-15406
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclu
V. Comments for CVE-2026-27555
No comments yet