CVE-2026-81942

Summary

The PLANET IGS-5225-8P2T4S industrial managed switch is vulnerable to OS command injection due to insufficient input filtering, allowing a remote attacker to execute arbitrary commands and escalate privileges to root.

Exploitability

Exploitation requires a remote authenticated attacker and access to the web server interface. The vulnerability is relatively easy to exploit given the attacker's authentication.

Blast radius

If exploited, the attacker can fully compromise the device, potentially leading to data exfiltration, denial of service, or further network compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 1.2412b260707 or 2.2412b260519 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.