CVE-2026-81942

Name of the Vulnerable Software and Affected Versions PLANET IGS-5225-8P2T4S V1 versions prior to 1.2412b260707 PLANET IGS-5225-8P2T4S V2 versions prior to 2.2412b260519

Description The web server contains an OS command injection flaw where user-supplied input is passed to the system() function without sufficient filtering. This allows a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.

Recommendations Update PLANET IGS-5225-8P2T4S V1 to version 1.2412b260707 or later. Update PLANET IGS-5225-8P2T4S V2 to version 2.2412b260519 or later.