# CVE-2026-81945: PLANET IGS-5225-8P2T4S stack-based buffer overflow in web server

Source: https://junglewise.ai/threats/cve-2026-81945-planet-igs-5225-8p2t4s-industrial-managed-switch-v1-and-v2  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-18. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-81945 · Severity: medium · CVSS 6.6 · Published 2026-09-18

The PLANET IGS-5225-8P2T4S is an industrial managed network switch used to connect and protect devices in manufacturing and critical infrastructure environments. A stack-based buffer overflow in the device's web server allows a remote administrator to crash the switch or execute malicious code with system privileges, potentially leading to network outages or compromise of connected systems.

Technologies: [PLANET IGS-5225-8P2T4S V1](https://junglewise.ai/threats/technologies/igs-5225-8p2t4s-v1), [PLANET IGS-5225-8P2T4S V2](https://junglewise.ai/threats/technologies/igs-5225-8p2t4s-v2). Vendors: [PLANET](https://junglewise.ai/threats/vendors/planet).

## Quick answers

**Is CVE-2026-81945 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-81945 being exploited in the wild.

**How severe is CVE-2026-81945?** Medium severity, with a CVSS score of 6.6, published 18 September 2026.

**Which products and versions are affected?** PLANET IGS-5225-8P2T4S V1 before 1.2412b260707; PLANET IGS-5225-8P2T4S V2 before 2.2412b260519.

**Is there a fix for CVE-2026-81945?** A patch was published on 2026-09-18: Firmware v1.2412b260707 (V1) and v2.2412b260519 (V2) released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-81945 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-81945?** Check whether you run PLANET IGS-5225-8P2T4S V1 or PLANET IGS-5225-8P2T4S V2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in the web server due to insufficient bounds checking when copying data into a stack buffer. The vulnerability requires administrative credentials and network access, but permits remote code execution or denial of service on the underlying operating system. Patches are available: firmware v1.2412b260707 for V1 and v2.2412b260519 for V2.

## Affected products

- PLANET IGS-5225-8P2T4S V1 before 1.2412b260707
- PLANET IGS-5225-8P2T4S V2 before 2.2412b260519

## Timeline

- 2026-09-18: disclosed
- 2026-09-18: patched: Firmware v1.2412b260707 (V1) and v2.2412b260519 (V2) released

## References

- [https://www.planet.com.tw/en/support/security-advisory/11](https://www.planet.com.tw/en/support/security-advisory/11)
- [https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-admin-stack-based-buffer-overflow-via-web-server](https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-admin-stack-based-buffer-overflow-via-web-server)

## Related threats

- [PLANET IGS-5225-8P2T4S weak password hashing in firmware](https://junglewise.ai/threats/cve-2026-81946-planet-igs-5225-8p2t4s-industrial-managed-switch-v1-and-v2)
- [PLANET IGS-5225-8P2T4S stack-based buffer overflow in web server](https://junglewise.ai/threats/cve-2026-81944-planet-igs-5225-8p2t4s-industrial-managed-switch-v1-and-v2)
- [PLANET IGS-5225-8P2T4S debug mode remote code execution](https://junglewise.ai/threats/cve-2026-81943-planet-igs-5225-8p2t4s-industrial-managed-switch-v1-and-v2)
- [PLANET IGS-5225-8P2T4S OS command injection in web server](https://junglewise.ai/threats/cve-2026-81942-planet-igs-5225-8p2t4s-industrial-managed-switch-v1-and-v2)