What’s Vulnerable › Products

Phoenix Contact IOL MA8 EIP DI8 vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.

Check whether your Phoenix Contact IOL MA8 EIP DI8 version is affected

Latest Phoenix Contact IOL MA8 EIP DI8 vulnerabilities

• CVE-2026-27565 — Remote code execution via uploading a malicious IODD file (CVSS 9.8)
• CVE-2026-27564 — Command Injection via PUT in /api/datastorage/data (CVSS 7.2)
• CVE-2026-27563 — Command Injection via GET in /api/datastorage/data (CVSS 7.2)
• CVE-2026-27562 — Command Injection via PUT in /api/iodd/config (CVSS 7.2)
• CVE-2026-27561 — Command Injection via GET in /api/iodd/config (CVSS 7.2)
• CVE-2026-27560 — Command Injection via DELETE in /api/status/data (CVSS 7.2)
• CVE-2026-27559 — Command Injection via GET in /api/status/data (CVSS 8.8)
• CVE-2026-27558 — Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files (CVSS 8.8)
• CVE-2026-27557 — Path Traversal in /index.php/view_uploaded_iodd_file (CVSS 7.5)
• CVE-2026-27556 — Local File Inclusion in /index.php/ajax/save_iodd_parameters (CVSS 8.8)
• CVE-2026-27555 — Local File Inclusion in /index.php/ajax/get_iodd_port_info (CVSS 8.8)
• CVE-2026-27554 — Command Injection in /index.php/ajax/save_iodd_parameters (CVSS 8.8)
• CVE-2026-27553 — Information Disclosure via Schema Path Manipulation (CVSS 6.5)
• CVE-2026-27552 — Unauthorized IODD File Upload due to Improper Authorization (CVSS 8.1)
• CVE-2026-27551 — Command Injection in /index.php/ajax/parameterManage (CVSS 8.8)
• CVE-2026-27550 — Command Injection in Field_Shadow_Password Class (CVSS 8.8)
• CVE-2026-27549 — Command Injection in /index.php/attached_devices_tab/do_upload (CVSS 8.8)
• CVE-2026-27548 — Command Injection in /index.php/ajax/get_iodd_port_info (CVSS 8.8)
• CVE-2026-27547 — Command Injection in /index.php/ajax/get_iodd_menu_info (CVSS 8.8)
• CVE-2026-27546 — Authentication Bypass in _account_log (CVSS 9.8)