Phoenix Contact vulnerabilities
193 published CVEs name Phoenix Contact among the affected products.
- 193Published CVEs193 of them scored
- 73Last 12 monthspublished in the last year
- 20Critical123 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110935
Path traversal in plug-in deployment
Phoenix Contact · PLCnext Engineer
High8.6 - CVE-2026-110022
Signed plug-in validation bypass
Phoenix Contact · PLCnext Engineer
High8.6 - CVE-2026-110021
Missing GSDX SignatureValue verification
Phoenix Contact · PLCnext Engineer
Medium6.9 - CVE-2026-27565
Remote code execution via uploading a malicious IODD file
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
Critical9.8 - CVE-2026-27564
Command Injection via PUT in /api/datastorage/data
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High7.2 - CVE-2026-27563
Command Injection via GET in /api/datastorage/data
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High7.2 - CVE-2026-27562
Command Injection via PUT in /api/iodd/config
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High7.2 - CVE-2026-27561
Command Injection via GET in /api/iodd/config
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High7.2 - CVE-2026-27560
Command Injection via DELETE in /api/status/data
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High7.2 - CVE-2026-27559
Command Injection via GET in /api/status/data
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
High8.8