CVE-2026-4769
Critical
Description
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWago 0765-110x/0100-0000
PublishedJul 13, 2026
First seenJul 13, 2026
Weakness typeCWE-912CWE-912
How to fix
Update
- WAGO 0765-110x/0100-00001.2.1.100 or later
- WAGO 0765-120x/0100-00001.2.7.100 or later
- WAGO 0765-150x/0100-00001.2.7.103 or later
- WAGO 0765-2101/0100-00001.2.1.102 or later
- WAGO 0765-2102/0100-00001.2.5.101 or later
- WAGO 0765-410x/0100-00001.2.1.100 or later
- WAGO 0765-420x/0100-00001.2.7.100 or later
- WAGO 0765-450x/0100-00001.2.7.103 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO 0765-110x/0100-0000 | 1.0.0.0 ≤ v < 1.2.1.100 | 1.2.1.100 |
| WAGO 0765-120x/0100-0000 | 1.0.0.0 ≤ v < 1.2.7.100 | 1.2.7.100 |
| WAGO 0765-150x/0100-0000 | 1.0.0.0 ≤ v < 1.2.7.103 | 1.2.7.103 |
| WAGO 0765-2101/0100-0000 | 1.0.0.0 ≤ v < 1.2.1.102 | 1.2.1.102 |
| WAGO 0765-2102/0100-0000 | 1.0.0.0 ≤ v < 1.2.5.101 | 1.2.5.101 |
| WAGO 0765-410x/0100-0000 | 1.0.0.0 ≤ v < 1.2.1.100 | 1.2.1.100 |
| WAGO 0765-420x/0100-0000 | 1.0.0.0 ≤ v < 1.2.7.100 | 1.2.7.100 |
| WAGO 0765-450x/0100-0000 | 1.0.0.0 ≤ v < 1.2.7.103 | 1.2.7.103 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.