CVE-2026-4769 — Unauthenticated Access to Internal Diagnostic Interface
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented…
Published: 2026-07-13 · CVSS: 9.3 · CVSS 4.0
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7