CVE-2026-27553: medium-severity vulnerability in Carlo Gavazzi Automation YL212CEI8M1IO
Information Disclosure via Schema Path Manipulation
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.6%
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_table_rows endpoint using a valid user cookie allowing disclosure of all user password hashes.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Carlo Gavazzi Automation · YL212CEI8M1IOCarlo Gavazzi Automation · YL212CPN8M1IOCarlo Gavazzi Automation · YN115CEI8RPIOCarlo Gavazzi Automation · YN115CPN8RPIOPepperl+Fuchs · ICE2-8IOL1-G65L-V1DPepperl+Fuchs · ICE2-8IOL-G65L-V1DPepperl+Fuchs · ICE2-8IOL-K45P-RJ45Pepperl+Fuchs · ICE2-8IOL-K45S-RJ45Pepperl+Fuchs · ICE3-8IOL1-G65L-V1DPepperl+Fuchs · ICE3-8IOL-G65L-V1DPepperl+Fuchs · ICE3-8IOL-G65L-V1D-YPepperl+Fuchs · ICE3-8IOL-K45P-RJ45Pepperl+Fuchs · ICE3-8IOL-K45S-RJ45Phoenix Contact · IOL MA8 EIP DI8Phoenix Contact · IOL MA8 PN DI8Related CVEs — Carlo Gavazzi Automation YL212CEI8M1IO
In the same product, most dangerous first.
CVE-2026-27559HIGHCommand Injection via GET in /api/status/dataEPSS 2.9%CVE-2026-27558HIGHCommand Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_filesEPSS 2.9%CVE-2026-27554HIGHCommand Injection in /index.php/ajax/save_iodd_parametersEPSS 2.9%CVE-2026-27551HIGHCommand Injection in /index.php/ajax/parameterManageEPSS 2.9%CVE-2026-27550HIGHCommand Injection in Field_Shadow_Password ClassEPSS 2.9%CVE-2026-27549HIGHCommand Injection in /index.php/attached_devices_tab/do_uploadEPSS 2.9%