Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Carlo Gavazzi
Yl212cpn8m1io

Carlo Gavazzi YL212CPN8M1IO Vulnerabilities: CVEs, CISA KEV & Security Advisories

20 CVEs

CG

Carlo Gavazzi YL212CPN8M1IO Vulnerabilities

CVE security advisories and vulnerability history for YL212CPN8M1IO by Carlo Gavazzi.

20

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.3

Avg CVSS

2026–2026

Last updated September 16, 2026

Overview

Carlo Gavazzi YL212CPN8M1IO has 20 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

Severity and exploitation

How the CVSS severity of Carlo Gavazzi YL212CPN8M1IO's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High17

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Carlo Gavazzi YL212CPN8M1IO's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Carlo Gavazzi YL212CPN8M1IO CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Carlo Gavazzi YL212CPN8M1IO version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0.0 <= v < 1.7.420 CVEs

Fixed in

1.7.420 CVEs

Find a version

20 CVEs

Sort

Remote code execution via uploading a malicious IODD file
CVE-2026-27565
Patch
CWE-78
Critical · CVSS 9.8
EPSS 1.0% (61th pct)2026-09-16
Command Injection via PUT in /api/datastorage/data
CVE-2026-27564
Patch
CWE-78
High · CVSS 7.2
EPSS 2.7% (86th pct)2026-09-16
Command Injection via GET in /api/datastorage/data
CVE-2026-27563
Patch
CWE-78
High · CVSS 7.2
EPSS 2.7% (86th pct)2026-09-16
Command Injection via PUT in /api/iodd/config
CVE-2026-27562
Patch
CWE-78
High · CVSS 7.2
EPSS 2.7% (86th pct)2026-09-16
Command Injection via GET in /api/iodd/config
CVE-2026-27561
Patch
CWE-78
High · CVSS 7.2
EPSS 2.7% (86th pct)2026-09-16
Command Injection via DELETE in /api/status/data
CVE-2026-27560
Patch
CWE-78
High · CVSS 7.2
EPSS 2.7% (86th pct)2026-09-16
Command Injection via GET in /api/status/data
CVE-2026-27559
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
CVE-2026-27558
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Path Traversal in /index.php/view_uploaded_iodd_file
CVE-2026-27557
Patch
CWE-35
High · CVSS 7.5
EPSS 0.7% (53th pct)2026-09-16
Local File Inclusion in /index.php/ajax/save_iodd_parameters
CVE-2026-27556
Patch
CWE-98
High · CVSS 8.8
EPSS 0.9% (59th pct)2026-09-16
Local File Inclusion in /index.php/ajax/get_iodd_port_info
CVE-2026-27555
Patch
CWE-98
High · CVSS 8.8
EPSS 0.9% (59th pct)2026-09-16
Command Injection in /index.php/ajax/save_iodd_parameters
CVE-2026-27554
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Information Disclosure via Schema Path Manipulation
CVE-2026-27553
Patch
CWE-497
Medium · CVSS 6.5
EPSS 0.6% (45th pct)2026-09-16
Unauthorized IODD File Upload due to Improper Authorization
CVE-2026-27552
Patch
CWE-863
High · CVSS 8.1
EPSS 0.6% (48th pct)2026-09-16
Command Injection in /index.php/ajax/parameterManage
CVE-2026-27551
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Command Injection in Field_Shadow_Password Class
CVE-2026-27550
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Command Injection in /index.php/attached_devices_tab/do_upload
CVE-2026-27549
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Command Injection in /index.php/ajax/get_iodd_port_info
CVE-2026-27548
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Command Injection in /index.php/ajax/get_iodd_menu_info
CVE-2026-27547
Patch
CWE-78
High · CVSS 8.8
EPSS 2.9% (87th pct)2026-09-16
Authentication Bypass in _account_log
CVE-2026-27546
Patch
CWE-288
Critical · CVSS 9.8
EPSS 1.0% (63th pct)2026-09-16

Common weakness types

The CWE weakness categories most often found in Carlo Gavazzi YL212CPN8M1IO CVEs. Follow any weakness for its full explanation.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')14 CVEs
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVE
CWE-35Path Traversal: '.../...//'1 CVE
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVE
CWE-863Incorrect Authorization1 CVE

Other Carlo Gavazzi products

Browse vulnerabilities for other products by Carlo Gavazzi.

YL212CEI8M1IO20 CVEs yl212cei8m1io firmware20 CVEs yl212cpn8m1io firmware20 CVEs YN115CEI8RPIO20 CVEs yn115cei8rpio firmware20 CVEs YN115CPN8RPIO20 CVEs yn115cpn8rpio firmware20 CVEs CPY Car Park Server11 CVEs

All Carlo Gavazzi vulnerabilities

Frequently asked questions

Common questions about Carlo Gavazzi YL212CPN8M1IO vulnerabilities.

How many CVEs does Carlo Gavazzi YL212CPN8M1IO have?: Carlo Gavazzi YL212CPN8M1IO has 20 published CVE records since 2026.
How many Carlo Gavazzi YL212CPN8M1IO CVEs are in CISA KEV?: None of Carlo Gavazzi YL212CPN8M1IO's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Carlo Gavazzi YL212CPN8M1IO vulnerabilities?: No Carlo Gavazzi YL212CPN8M1IO CVEs currently have a tracked public exploit in this dataset.
Which versions of Carlo Gavazzi YL212CPN8M1IO are affected?: 2 distinct Carlo Gavazzi YL212CPN8M1IO versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Carlo Gavazzi YL212CPN8M1IO CVEs?: Carlo Gavazzi YL212CPN8M1IO's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-35 (Path Traversal: '.../...//').
How many critical Carlo Gavazzi YL212CPN8M1IO vulnerabilities are there?: Carlo Gavazzi YL212CPN8M1IO has 2 critical and 17 high-severity CVEs.
What is the average severity of Carlo Gavazzi YL212CPN8M1IO CVEs?: The average CVSS base score across Carlo Gavazzi YL212CPN8M1IO's scored CVEs is 8.3.

References

All Carlo Gavazzi vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Carlo Gavazzi YL212CPN8M1IO vulnerabilities

Get an alert for each new Carlo Gavazzi YL212CPN8M1IO CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References