What’s Vulnerable › Vulnerabilities

CVE-2026-81945: PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-26
• Weakness: CWE-121

Description

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or potentially execute arbitrary code on the underlying operating system.

Affected products

• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1: before 1.2412b260707 — fixed in 1.2412b260707
• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2: before 2.2412b260519 — fixed in 2.2412b260519

How to fix

Upgrade to a fixed version: PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1 1.2412b260707; PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2 2.2412b260519. Check the vendor advisory for mitigations.

References

• https://www.planet.com.tw/en/support/security-advisory/11
• https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-admin-stack-based-buffer-overflow-via-web-server

Get alerted when CVE-2026-81945 or the next vulnerability affects your stack