What’s Vulnerable › Vulnerabilities

CVE-2026-81946: PLANET IGS-5225-8P2T4S V1/V2 Weak Password Hashing via MD5 Algorithm

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-22
• Weakness: CWE-121

Description

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.

Affected products

• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1: before 1.2412b260707 — fixed in 1.2412b260707
• PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2: before 2.2412b260519 — fixed in 2.2412b260519

How to fix

Upgrade to a fixed version: PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1 1.2412b260707; PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2 2.2412b260519. Check the vendor advisory for mitigations.

References

• https://www.planet.com.tw/en/support/security-advisory/11
• https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-weak-password-hashing-via-md5-algorithm

Get alerted when CVE-2026-81946 or the next vulnerability affects your stack