Phoenix Contact vulnerabilities

CVEs per yearBy the year they were published

1. 20151
2. 20183
3. 20191
4. 20209
5. 202119
6. 20228
7. 202324
8. 202432
9. 202537
10. 202659

Newest CVEs

• CVE-2026-110935

  Path traversal in plug-in deployment

  Phoenix Contact · PLCnext Engineer

  High8.6
• CVE-2026-110022

  Signed plug-in validation bypass

  Phoenix Contact · PLCnext Engineer

  High8.6
• CVE-2026-110021

  Missing GSDX SignatureValue verification

  Phoenix Contact · PLCnext Engineer

  Medium6.9
• CVE-2026-27565

  Remote code execution via uploading a malicious IODD file

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  Critical9.8
• CVE-2026-27564

  Command Injection via PUT in /api/datastorage/data

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High7.2
• CVE-2026-27563

  Command Injection via GET in /api/datastorage/data

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High7.2
• CVE-2026-27562

  Command Injection via PUT in /api/iodd/config

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High7.2
• CVE-2026-27561

  Command Injection via GET in /api/iodd/config

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High7.2
• CVE-2026-27560

  Command Injection via DELETE in /api/status/data

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High7.2
• CVE-2026-27559

  Command Injection via GET in /api/status/data

  Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

  High8.8