CVE-2026-22317: Phoenix Contact Fl Nat 2008

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.

Affected products

• Phoenix Contact Fl Nat 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2304-2gc-2sfp: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2005: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008f: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2016: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2105: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2108: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2116: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2204-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2205: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206c-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208 Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208c: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2212-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• and 52 more

Published 2026-03-18. Last modified 2026-06-17.