CVE-2026-4769
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.76%
- CWE
- CWE-912
- Published
- 2026-07-13
- Last modified
- 2026-07-13
Affected products
- WAGO 0765-110x/0100-0000
- WAGO 0765-120x/0100-0000
- WAGO 0765-150x/0100-0000
- WAGO 0765-2101/0100-0000
- WAGO 0765-2102/0100-0000
- WAGO 0765-410x/0100-0000
- WAGO 0765-420x/0100-0000
- WAGO 0765-450x/0100-0000
Weakness type
Related vulnerabilities
- CVE-2026-18844 — Pulsetto Vagus Nerve Stimulator Hidden Functionality
- CVE-2026-61515 — Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
- CVE-2026-18191 — Vacron｜IP Camera - Hidden Functionality
- CVE-2026-7413 — Persistent undocumented backdoor access in Yarbo robot
- CVE-2026-41446 — WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
- CVE-2026-1952 — Denial of service via the undocumented subfunction in AS320T
- CVE-2026-34769 — Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference
- CVE-2026-4621 — Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable...