Perle Systems vulnerabilities

Products

• IOLAN SCS 1
• IOLAN STS 1

Latest Perle Systems CVEs

Newest publication first

1. CVE-2026-23759 Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps'

   Published 2026-03-17

   High·CVSS 8.6 EPSS 1.8%

   Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell 'ps' command does not perform proper argument sanitization and passes user-supplied parameters i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.