CVE-2026-4769
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In WAGO System I/O Field series devices, an internal diagnostic capability activates during the initial startup sequence. It is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to internal system processes, resulting in full system compromise.
Risk Assessment
The risk is the potential for remote takeover of industrial automation devices without authentication, which could disrupt production processes, lead to data theft, or allow the devices to be used as an entry point into the industrial network.
Recommendation
Immediately update the firmware of WAGO System I/O Field devices to a version that fixes this vulnerability window. Until the update is applied, restrict network access to these devices to trusted hosts only.
Original NVD description (English source)
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.