Carlo Gavazzi Automation vulnerabilities, page 2
22 vulnerabilities
Known vulnerabilities in Carlo Gavazzi Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
HighCVE-2026-27552carlo gavazzi automation · yl212cei8m1io +14 moreUnauthorized IODD File Upload due to Improper AuthorizationA low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes.EPSS0.60%HighCVE-2026-27556carlo gavazzi automation · yl212cei8m1io +14 moreLocal File Inclusion in /index.php/ajax/save_iodd_parametersA low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device.EPSS0.89%