This vulnerability (CVE-2026-27550) involves improper neutralization of special elements used in an OS command (CWE-78) within the Field_Shadow_Password class of the Pepperl+Fuchs ICE2-8IOL1-G65L-V1D device. An attacker with operator-level credentials can remotely execute arbitrary commands with root privileges on the device. The affected versions are >=1.0.0 and <1.7.4. The CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows a remote attacker with operator credentials to execute arbitrary commands with root privileges, potentially leading to full system compromise including confidentiality, integrity, and availability impacts on the affected device.

No patch or official fix information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict operator credential access and monitor for suspicious activity related to command execution on the device.