CVE-2026-81944 is a stack-based buffer overflow vulnerability in the web server component of PLANET IGS-5225-8P2T4S industrial managed switches. Firmware versions prior to 1.2412b260707 for V1 and prior to 2.2412b260519 for V2 are affected. The vulnerability arises from insufficient bounds checking when copying data into a stack buffer, enabling a remote attacker with authentication privileges to cause denial of service or potentially execute arbitrary code on the underlying OS.

Exploitation of this vulnerability can lead to denial of service or remote code execution on affected devices. The attacker must be authenticated and the attack complexity is high. The vulnerability impacts the confidentiality, integrity, and availability of the device due to potential arbitrary code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the device's web interface to trusted users and networks, and monitor for suspicious activity involving authenticated sessions.