CVE-2026-81942
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Sep 18, 2026
Vendor
unknown
Description
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.