Vendor
Pepperl+Fuchs
50 known vulnerabilities in products by Pepperl+Fuchs, 0 of them actively exploited (CISA KEV).
Key figures
50
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-27559 | Command Injection via GET in /api/status/data | 8.8 | |
| High | CVE-2026-27558 | Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files | 8.8 | |
| High | CVE-2026-27554 | Command Injection in /index.php/ajax/save_iodd_parameters | 8.8 | |
| High | CVE-2026-27551 | Command Injection in /index.php/ajax/parameterManage | 8.8 | |
| High | CVE-2026-27550 | Command Injection in Field_Shadow_Password Class | 8.8 | |
| High | CVE-2026-27548 | Command Injection in /index.php/ajax/get_iodd_port_info | 8.8 | |
| High | CVE-2026-27547 | Command Injection in /index.php/ajax/get_iodd_menu_info | 8.8 | |
| High | CVE-2026-27549 | Command Injection in /index.php/attached_devices_tab/do_upload | 8.8 | |
| High | CVE-2026-27564 | Command Injection via PUT in /api/datastorage/data | 7.2 | |
| High | CVE-2026-27563 | Command Injection via GET in /api/datastorage/data | 7.2 | |
| High | CVE-2026-27562 | Command Injection via PUT in /api/iodd/config | 7.2 | |
| High | CVE-2026-27561 | Command Injection via GET in /api/iodd/config | 7.2 | |
| High | CVE-2026-27560 | Command Injection via DELETE in /api/status/data | 7.2 | |
| High | CVE-2020-12513 | Pepper+Fuchs Comtrol IO-Link Master OS Command Injection | 7.5 | |
| High | CVE-2020-12503 | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products | 7.2 | |
| Critical | CVE-2020-12501 | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products | 9.8 | |
| Critical | CVE-2020-12504 | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products | 9.8 | |
| Critical | CVE-2020-12500 | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products | 9.8 | |
| Medium | CVE-2017-5753 | Intel Core i5: security vulnerability | 5.6 | |
| Critical | CVE-2026-27546 | Authentication Bypass in _account_log | 9.8 | |
| Critical | CVE-2026-27565 | Remote code execution via uploading a malicious IODD file | 9.8 | |
| High | CVE-2026-27556 | Local File Inclusion in /index.php/ajax/save_iodd_parameters | 8.8 | |
| High | CVE-2026-27555 | Local File Inclusion in /index.php/ajax/get_iodd_port_info | 8.8 | |
| High | CVE-2026-27557 | Path Traversal in /index.php/view_uploaded_iodd_file | 7.5 | |
| High | CVE-2026-27552 | Unauthorized IODD File Upload due to Improper Authorization | 8.1 |