cvedb.io
CVE-2026-4769
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2026-07-13T08:16:21.343 · Last modified 2026-07-13T08:16:21.343

Summary

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.