CVE-2026-22317: high-severity vulnerability in Phoenix Contact FL NAT 2008
Command Injection Vulnerability in Root CA Certificate Transfer Workflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 1.0%
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Phoenix Contact · FL NAT 2008Phoenix Contact · FL NAT 2208Phoenix Contact · FL NAT 2304-2GC-2SFPPhoenix Contact · FL SWITCH 2005Phoenix Contact · FL SWITCH 2008Phoenix Contact · FL SWITCH 2008FPhoenix Contact · FL SWITCH 2016Phoenix Contact · FL SWITCH 2105Phoenix Contact · FL SWITCH 2108Phoenix Contact · FL SWITCH 2116Phoenix Contact · FL SWITCH 2204-2TC-2SFXPhoenix Contact · FL SWITCH 2205Phoenix Contact · FL SWITCH 2206-2FXPhoenix Contact · FL SWITCH 2206-2FX SMPhoenix Contact · FL SWITCH 2206-2FX SM STPhoenix Contact · FL SWITCH 2206-2FX STPhoenix Contact · FL SWITCH 2206-2SFXPhoenix Contact · FL SWITCH 2206-2SFX PNPhoenix Contact · FL SWITCH 2206C-2FXPhoenix Contact · FL SWITCH 2207-FXPhoenix Contact · FL SWITCH 2207-FX SMPhoenix Contact · FL SWITCH 2208Phoenix Contact · FL SWITCH 2208CPhoenix Contact · FL SWITCH 2208 PNPhoenix Contact · FL SWITCH 2212-2TC-2SFXPhoenix Contact · FL SWITCH 2214-2FXPhoenix Contact · FL SWITCH 2214-2FX SMPhoenix Contact · FL SWITCH 2214-2SFXPhoenix Contact · FL SWITCH 2214-2SFX PNPhoenix Contact · FL SWITCH 2216Phoenix Contact · FL SWITCH 2216 PNPhoenix Contact · FL SWITCH 2303-8SP1Phoenix Contact · FL SWITCH 2304-2GC-2SFPPhoenix Contact · FL SWITCH 2306-2SFPPhoenix Contact · FL SWITCH 2306-2SFP PNPhoenix Contact · FL SWITCH 2308Phoenix Contact · FL SWITCH 2308 PNPhoenix Contact · FL SWITCH 2312-2GC-2SFPPhoenix Contact · FL SWITCH 2314-2SFPPhoenix Contact · FL SWITCH 2314-2SFP PNPhoenix Contact · FL SWITCH 2316Phoenix Contact · FL SWITCH 2316/K1Phoenix Contact · FL SWITCH 2316 PNPhoenix Contact · FL SWITCH 2404-2TC-2SFXPhoenix Contact · FL SWITCH 2406-2SFXPhoenix Contact · FL SWITCH 2406-2SFX PNPhoenix Contact · FL SWITCH 2408Phoenix Contact · FL SWITCH 2408 PNPhoenix Contact · FL SWITCH 2412-2TC-2SFXPhoenix Contact · FL SWITCH 2414-2SFXPhoenix Contact · FL SWITCH 2414-2SFX PNPhoenix Contact · FL SWITCH 2416Phoenix Contact · FL SWITCH 2416 PNPhoenix Contact · FL SWITCH 2504-2GC-2SFPPhoenix Contact · FL SWITCH 2506-2SFPPhoenix Contact · FL SWITCH 2506-2SFP/K1Phoenix Contact · FL SWITCH 2506-2SFP PNPhoenix Contact · FL SWITCH 2508Phoenix Contact · FL SWITCH 2508/K1Phoenix Contact · FL SWITCH 2508 PNPhoenix Contact · FL SWITCH 2512-2GC-2SFPPhoenix Contact · FL SWITCH 2514-2SFPPhoenix Contact · FL SWITCH 2514-2SFP PNPhoenix Contact · FL SWITCH 2516Phoenix Contact · FL SWITCH 2516 PNPhoenix Contact · FL SWITCH 2608Phoenix Contact · FL SWITCH 2608 PNPhoenix Contact · FL SWITCH 2708Phoenix Contact · FL SWITCH 2708 PNPhoenix Contact · FL SWITCH 5916-8GC-4SFP+Phoenix Contact · FL SWITCH 5916SFP-8GC-4SFP+Phoenix Contact · FL SWITCH 5924-4GCPhoenix Contact · FL SWITCH 5924-4SFP+Phoenix Contact · FL SWITCH 5924SFP-4GCPhoenix Contact · FL SWITCH TSN 2312-2GC-2SFPPhoenix Contact · FL SWITCH TSN 2314-2SFPPhoenix Contact · FL SWITCH TSN 2316Related CVEs — Phoenix Contact FL NAT 2008
In the same product, most dangerous first.
CVE-2025-41746HIGHReflected XSS vulnerability in pxc_portSecCfg.phpEPSS 10.4%CVE-2025-41747HIGHReflected XSS vulnerability in pxc_vlanIntfCfg.phpEPSS 10.4%CVE-2025-41748HIGHReflected XSS vulnerability in pxc_Dot1xCfg.phpEPSS 10.4%CVE-2025-41750HIGHReflected XSS vulnerability in pxc_PortCfg.phpEPSS 10.4%CVE-2025-41751HIGHReflected XSS vulnerability in pxc_portCntr.phpEPSS 10.4%CVE-2025-41752HIGHReflected XSS vulnerability in pxc_portSfp.phpEPSS 10.4%