PT-2026-57650 · Wago · 0765-110X/0100-0000+7

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-4769

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Fix

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2026-4769

Affected Products

0765-110X/0100-0000

0765-120X/0100-0000

0765-150X/0100-0000

0765-2101/0100-0000

0765-2102/0100-0000

0765-410X/0100-0000

0765-420X/0100-0000

0765-450X/0100-0000

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-4769 · Security Note
• https://certvde.com/en/advisories/VDE-2026-031 · Note