Unauthenticated Access Vulnerability in WAGO System I/O Field Devices
CVE-2026-4769

9.3CRITICAL

Key Information:

Vendor

Wago

Status
0765-110x/0100-0000
0765-120x/0100-0000
0765-150x/0100-0000
0765-2101/0100-0000
Vendor
CVE Published:
13 July 2026

What is CVE-2026-4769?

Certain WAGO System I/O Field devices exhibit a vulnerability that allows unauthenticated remote access to internal diagnostic capabilities during the startup process. This undocumented functionality becomes available for a short period during the early boot phase, which attackers can exploit to access system processes. Successful exploitation of this vulnerability can lead to a full compromise of the affected system, posing significant risks to network security.

Affected Version(s)

0765-110x/0100-0000 1.0.0.0 < 1.2.1.100

0765-120x/0100-0000 1.0.0.0 < 1.2.7.100

0765-150x/0100-0000 1.0.0.0 < 1.2.7.103

References

https://www.certvde.com/en/advisories/VDE-2026-031/

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.