Planet Igs 5225 8p2t4s V1 V2 Os Command Injection Via Web Server

Back www.vulncheck.com

Planet Igs 5225 8p2t4s V1 V2 Os Command Injection Via Web Server

www.vulncheck.com • September 19, 2026

Share: View original

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High-Risk OS Command Injection Vulnerability in PLANET IGS-5225 Switches PLANET Technology Corp. has disclosed a critical OS command injection vulnerability (CVE-2026-81942) affecting the IGS-5225-8P2T4S industrial managed switch firmware versions prior to 1.2412b260707 and 2.2412b260519. This vulnerability allows remote authenticated attackers to execute arbitrary commands on the underlying operating system, potentially escalating privileges to root. The CVSS v4.0 score for this vulnerability is 8.7, indicating a high severity level. Other related vulnerabilities include CVE-2026-81943, CVE-2026-81944, and CVE-2026-81945, which also present significant risks. Organizations using these switches in poorly segregated networks are particularly vulnerable. Immediate action is required to mitigate risks, including upgrading firmware and restricting access to management interfaces. The vulnerability was published on September 18, 2026, and is currently not known to be actively exploited. 1 sources 66

Extracted Entities

Attack Types (1)

Command Injection

CWE Weaknesses (1)

CWE-78 - OS Command Injection

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter

Vulnerabilities (1)

OS Command Injection