poslední zpráva
SPOJENO PŘES CVE EPSS 0.03 (nejvyšší)
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
[VDE-2026-028] The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive information such as password hashes or private keys from the devices.
CVE v události 20
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-27546 | 9.8 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27547 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27548 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27549 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27550 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27551 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27552 | 8.1 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27553 | 6.5 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27554 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27555 | 8.8 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27556 | 8.8 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27557 | 7.5 3.1 · CERTVDE | – | 0.01 |
| CVE-2026-27558 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27559 | 8.8 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27560 | 7.2 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27561 | 7.2 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27562 | 7.2 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27563 | 7.2 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27564 | 7.2 3.1 · CERTVDE | – | 0.03 |
| CVE-2026-27565 | 9.8 3.1 · CERTVDE | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 3
-
· CERT@VDE DE nadpis události
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
[VDE-2026-028] The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive information such as password hashes or private keys from the devices.
-
· CERT@VDE DE
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
[VDE-2026-014] The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive information such as password hashes or private keys from the devices.
-
· CERT@VDE DE
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
[VDE-2026-027] The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive information such as password hashes or private keys from the devices.