CVE-2026-81942 — PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web serv…
Published: 2026-09-18 · CVSS: 8.7 · CVSS 4.0
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7