CVE-2026-27552 in ICE2-8IOL1-G65L-V1D

Riassunto

di MITRE • 16/09/2026

A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: CERTVDE
• Prenotare: 20/02/2026
• Divulgazione: 16/09/2026
• Moderazione: accettato
• Voce: VDB-405528
• CPE: pronto
• CWE: CWE-285 (confermato)
• CVSS: 8.1 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-27552
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-27552
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-27552/