CG
Vendor
Carlo Gavazzi Automation
82
CVEs
0
On KEV
0
New 30D
Products
YL9.8
YL212CEI8M1IO
Carlo Gavazzi Automation
20 CVEs0 on KEV0 new
YL9.8
YL212CPN8M1IO
Carlo Gavazzi Automation
20 CVEs0 on KEV0 new
YN9.8
YN115CEI8RPIO
Carlo Gavazzi Automation
20 CVEs0 on KEV0 new
YN9.8
YN115CPN8RPIO
Carlo Gavazzi Automation
20 CVEs0 on KEV0 new
EO–
EOS-Box
Carlo Gavazzi Automation
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27565 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 9.8 | Sep 16 | Remote code execution via uploading a malicious IODD file |
| CVE-2026-27564 | YL YL212CEI8M1IO Carlo Gavazzi Automation | 7.2 | Sep 16 | Command Injection via PUT in /api/datastorage/data |
| CVE-2026-27563 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 7.2 | Sep 16 | Command Injection via GET in /api/datastorage/data |
| CVE-2026-27562 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 7.2 | Sep 16 | Command Injection via PUT in /api/iodd/config |
| CVE-2026-27561 | YN YN115CEI8RPIO Carlo Gavazzi Automation | 7.2 | Sep 16 | Command Injection via GET in /api/iodd/config |
| CVE-2026-27560 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 7.2 | Sep 16 | Command Injection via DELETE in /api/status/data |
| CVE-2026-27559 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection via GET in /api/status/data |
| CVE-2026-27558 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files |
| CVE-2026-27557 | YL YL212CPN8M1IO Carlo Gavazzi Automation | 7.5 | Sep 16 | Path Traversal in /index.php/view_uploaded_iodd_file |
| CVE-2026-27556 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 8.8 | Sep 16 | Local File Inclusion in /index.php/ajax/save_iodd_parameters |
| CVE-2026-27555 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 8.8 | Sep 16 | Local File Inclusion in /index.php/ajax/get_iodd_port_info |
| CVE-2026-27554 | YL YL212CEI8M1IO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/ajax/save_iodd_parameters |
| CVE-2026-27553 | YN YN115CEI8RPIO Carlo Gavazzi Automation | 6.5 | Sep 16 | Information Disclosure via Schema Path Manipulation |
| CVE-2026-27552 | YL YL212CEI8M1IO Carlo Gavazzi Automation | 8.1 | Sep 16 | Unauthorized IODD File Upload due to Improper Authorization |
| CVE-2026-27551 | YN YN115CPN8RPIO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/ajax/parameterManage |
| CVE-2026-27550 | YL YL212CPN8M1IO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in Field_Shadow_Password Class |
| CVE-2026-27549 | YL YL212CEI8M1IO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/attached_devices_tab/do_upload |
| CVE-2026-27548 | YL YL212CPN8M1IO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/ajax/get_iodd_port_info |
| CVE-2026-27547 | YL YL212CPN8M1IO Carlo Gavazzi Automation | 8.8 | Sep 16 | Command Injection in /index.php/ajax/get_iodd_menu_info |
| CVE-2026-27546 | YL YL212CPN8M1IO Carlo Gavazzi Automation | 9.8 | Sep 16 | Authentication Bypass in _account_log |
| CVE-2012-6428 | EO EOS-Box Carlo Gavazzi Automation | – | Dec 23 | Carlo Gavazzi EOS Box Hard-Coded Credentials |
| CVE-2012-6427 | EO EOS-Box Carlo Gavazzi Automation | – | Dec 23 | Carlo Gavazzi EOS Box SQL Injection |