CVE-2026-4769

CRITICAL

WAGO 0765-110x/0100-0000 - Unauthenticated Access to Internal Diagnostic Interface

Title source: rule
STIX 2.1

Description

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0045
EPSS Percentile 36.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-912
Status published
Products (8)
WAGO/0765-110x/0100-0000 1.0.0.0 - 1.2.1.100
WAGO/0765-120x/0100-0000 1.0.0.0 - 1.2.7.100
WAGO/0765-150x/0100-0000 1.0.0.0 - 1.2.7.103
WAGO/0765-2101/0100-0000 1.0.0.0 - 1.2.1.102
WAGO/0765-2102/0100-0000 1.0.0.0 - 1.2.5.101
WAGO/0765-410x/0100-0000 1.0.0.0 - 1.2.1.100
WAGO/0765-420x/0100-0000 1.0.0.0 - 1.2.7.100
WAGO/0765-450x/0100-0000 1.0.0.0 - 1.2.7.103
Published Jul 13, 2026
Tracked Since Jul 13, 2026