CVE-2026-81942: Planet Technology Corp Planet Igs-5225-8p2t4s v1

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.

Affected products

• Planet Technology Corp Planet Igs-5225-8p2t4s v1: before 1.2412b260707 (fixed in 1.2412b260707)
• Planet Technology Corp Planet Igs-5225-8p2t4s v2: before 2.2412b260519 (fixed in 2.2412b260519)

Published 2026-09-18. Last modified 2026-09-22.