CVE-2026-27552

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A low-privileged remote attacker can exploit improper authorization in the '/index.php/attached devices tab/do upload' endpoint to upload IODD files to the device. This action could potentially alter device behavior or cause system crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.