What’s Vulnerable › Vulnerabilities

CVE-2026-81944: PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-22
• Weakness: CWE-121

Description

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of service or potentially execute arbitrary code on the underlying operating system.

Affected products

• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1: before 1.2412b260707 — fixed in 1.2412b260707
• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2: before 2.2412b260519 — fixed in 2.2412b260519

How to fix

Upgrade to a fixed version: PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1 1.2412b260707; PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2 2.2412b260519. Check the vendor advisory for mitigations.

References

• https://www.planet.com.tw/en/support/security-advisory/11
• https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-stack-based-buffer-overflow-via-web-server

Get alerted when CVE-2026-81944 or the next vulnerability affects your stack