Is CVE-2026-81945 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-81945 being exploited in the wild.

How severe is CVE-2026-81945?

Medium severity, with a CVSS score of 6.6, published 18 September 2026.

Which products and versions are affected?

PLANET IGS-5225-8P2T4S V1 before 1.2412b260707; PLANET IGS-5225-8P2T4S V2 before 2.2412b260519.

Is there a fix for CVE-2026-81945?

A patch was published on 2026-09-18: Firmware v1.2412b260707 (V1) and v2.2412b260519 (V2) released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-81945 attacked?

It is attacked over the network.

Am I affected by CVE-2026-81945?

Check whether you run PLANET IGS-5225-8P2T4S V1 or PLANET IGS-5225-8P2T4S V2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-81945: PLANET IGS-5225-8P2T4S stack-based buffer overflow in web server

CVE-2026-81945 · Severity: medium · CVSS 6.6 · Published 2026-09-18

The PLANET IGS-5225-8P2T4S is an industrial managed network switch used to connect and protect devices in manufacturing and critical infrastructure environments. A stack-based buffer overflow in the device's web server allows a remote administrator to crash the switch or execute malicious code with system privileges, potentially leading to network outages or compromise of connected systems.

Technologies: PLANET IGS-5225-8P2T4S V1, PLANET IGS-5225-8P2T4S V2. Vendors: PLANET.

Quick answers

Is CVE-2026-81945 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-81945 being exploited in the wild.
How severe is CVE-2026-81945?: Medium severity, with a CVSS score of 6.6, published 18 September 2026.
Which products and versions are affected?: PLANET IGS-5225-8P2T4S V1 before 1.2412b260707; PLANET IGS-5225-8P2T4S V2 before 2.2412b260519.
Is there a fix for CVE-2026-81945?: A patch was published on 2026-09-18: Firmware v1.2412b260707 (V1) and v2.2412b260519 (V2) released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-81945 attacked?: It is attacked over the network.
Am I affected by CVE-2026-81945?: Check whether you run PLANET IGS-5225-8P2T4S V1 or PLANET IGS-5225-8P2T4S V2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in the web server due to insufficient bounds checking when copying data into a stack buffer. The vulnerability requires administrative credentials and network access, but permits remote code execution or denial of service on the underlying operating system. Patches are available: firmware v1.2412b260707 for V1 and v2.2412b260519 for V2.

Affected products

PLANET IGS-5225-8P2T4S V1 before 1.2412b260707
PLANET IGS-5225-8P2T4S V2 before 2.2412b260519

Timeline

2026-09-18: disclosed
2026-09-18: patched: Firmware v1.2412b260707 (V1) and v2.2412b260519 (V2) released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.