What’s Vulnerable › Products

Carlo Gavazzi Automation YL212CEI8M1IO vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.

Check whether your Carlo Gavazzi Automation YL212CEI8M1IO version is affected

Latest Carlo Gavazzi Automation YL212CEI8M1IO vulnerabilities

• CVE-2026-27565 — Remote code execution via uploading a malicious IODD file (CVSS 9.8)
• CVE-2026-27564 — Command Injection via PUT in /api/datastorage/data (CVSS 7.2)
• CVE-2026-27563 — Command Injection via GET in /api/datastorage/data (CVSS 7.2)
• CVE-2026-27562 — Command Injection via PUT in /api/iodd/config (CVSS 7.2)
• CVE-2026-27561 — Command Injection via GET in /api/iodd/config (CVSS 7.2)
• CVE-2026-27560 — Command Injection via DELETE in /api/status/data (CVSS 7.2)
• CVE-2026-27559 — Command Injection via GET in /api/status/data (CVSS 8.8)
• CVE-2026-27558 — Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files (CVSS 8.8)
• CVE-2026-27557 — Path Traversal in /index.php/view_uploaded_iodd_file (CVSS 7.5)
• CVE-2026-27556 — Local File Inclusion in /index.php/ajax/save_iodd_parameters (CVSS 8.8)
• CVE-2026-27555 — Local File Inclusion in /index.php/ajax/get_iodd_port_info (CVSS 8.8)
• CVE-2026-27554 — Command Injection in /index.php/ajax/save_iodd_parameters (CVSS 8.8)
• CVE-2026-27553 — Information Disclosure via Schema Path Manipulation (CVSS 6.5)
• CVE-2026-27552 — Unauthorized IODD File Upload due to Improper Authorization (CVSS 8.1)
• CVE-2026-27551 — Command Injection in /index.php/ajax/parameterManage (CVSS 8.8)
• CVE-2026-27550 — Command Injection in Field_Shadow_Password Class (CVSS 8.8)
• CVE-2026-27549 — Command Injection in /index.php/attached_devices_tab/do_upload (CVSS 8.8)
• CVE-2026-27548 — Command Injection in /index.php/ajax/get_iodd_port_info (CVSS 8.8)
• CVE-2026-27547 — Command Injection in /index.php/ajax/get_iodd_menu_info (CVSS 8.8)
• CVE-2026-27546 — Authentication Bypass in _account_log (CVSS 9.8)