CVE-2026-22318: Phoenix Contact Fl Nat 2008

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causing memory corruption in an internal process, resulting in a DoS attack.

Affected products

• Phoenix Contact Fl Nat 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2304-2gc-2sfp: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2005: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008f: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2016: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2105: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2108: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2116: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2204-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2205: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206c-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208 Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208c: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2212-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• and 52 more

Published 2026-03-18. Last modified 2026-06-17.