Wago vulnerabilities
99 CVEs and advisories name Wago as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-41753Path traversal in dynamically created BACnet File Objects
- CVE-2026-4769Unauthenticated Access to Internal Diagnostic Interface
- CVE-2023-5872Wago: Vulnerability in Smart Designer Web-Application
- CVE-2024-1490Wago: Vulnerability in WBM through Open VPN
- CVE-2026-2328Backend Access Due to Insufficient Input Validation
- CVE-2026-3587Hidden CLI Function Allows Root Access
- CVE-2026-22906Hardcoded Key Allows Credential Disclosure
- CVE-2026-22905Authentication Bypass via URI Traversal
- CVE-2026-22904Stack Overflow via Oversized Cookie Fields in lighttpd
- CVE-2026-22903Stack Overflow via SESSIONID Cookie in lighttpd
- CVE-2022-50926WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
- CVE-2025-41732Stack-based buffer overflow via unsafe sscanf in check_cookie()
- CVE-2025-41730Stack-based buffer overflow via unsafe sscanf in check_account()
- CVE-2025-41716Unauthenticated User Enumeration via Missing Authentication
- CVE-2025-41715Missing Authentication for Database Access in Web Application
- CVE-2025-41713WAGO: Vulnerability in hardware switch circuit
- CVE-2025-41664Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates
- CVE-2025-41672WAGO: Vulnerability in WAGO Device Sphere
- CVE-2025-25265Unauthenticated File Read via Web Interface
- CVE-2025-25264Overly Permissive CORS Policy in WAGO Device Manager
- CVE-2025-1235WAGO: Switches affected by year 2k38 problem
- CVE-2025-0101WAGO: Year 2038 problem
- CVE-2024-12650Wago: Vulnerability in libwagosnmp
- CVE-2018-25108WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption
- CVE-2024-41974WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices
- CVE-2024-41973WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
- CVE-2024-41972WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices
- CVE-2024-41971WAGO: Arbitrary File Overwrite in Multiple Devices
- CVE-2024-41970WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices
- CVE-2024-41969WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices