← All credits
Luca Borzacchiello from Nozomi Networks
23 vulnerability records and advisories credit this contributor.
CVE-2026-27553
Information Disclosure via Schema Path Manipulation
CVE-2026-27563
Command Injection via GET in /api/datastorage/data
CVE-2026-27558
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
CVE-2026-27548
Command Injection in /index.php/ajax/get_iodd_port_info
CVE-2026-27550
Command Injection in Field_Shadow_Password Class
CVE-2026-27555
Local File Inclusion in /index.php/ajax/get_iodd_port_info
CVE-2026-27560
Command Injection via DELETE in /api/status/data
CVE-2026-27565
Remote code execution via uploading a malicious IODD file
CVE-2026-27546
Authentication Bypass in _account_log
CVE-2026-27551
Command Injection in /index.php/ajax/parameterManage