CVE-2026-4769 exposes WAGO System I/O field devices. An early-boot flaw lets an unauthenticated attacker reach full system compromise.
WAGO
A critical 10.0 CVSS flaw in WAGO managed switches (CVE-2026-3587) allows unauthenticated remote takeover via an undocumented CLI backdoor. Update immediately.
A critical flaw (CVE-2025-41715) in WAGO Device Sphere allows an unauthenticated remote attacker to gain unauthorized access and potentially compromise its database.
A critical flaw (CVE-2025-41672, CVSS 10.0) in WAGO Device Sphere allows unauthenticated attackers full admin control via shared default JWT certificates. Update to v1.0.1 immediately!
WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.