CVE-2026-4769

Bestimmte Geräte der WAGO System I/O Field-Serie aktivieren während der initialen Startsequenz eine interne Diagnosefähigkeit.

criticalEPSS 0.8%

Description

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Metrics

9.8
Source: nvd-v3
53.8 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
Show all metrics
Severity
critical
no public PoC known
0.8 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-13 08:16 UTC
CWE-912

Weakness classes (CWE)

  • CWE-912Class

    Hidden Functionality

    The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

    cwe.mitre.org →

References & sources

Linked advisories