Vulnerability intelligence
CVE-2026-4769
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
0.8%
Riskier than 54% of all CVEs · checked 2026-10-11
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Jul 13, 2026 · latest Jul 13, 2026
Coverage timeline
-
Attackers can exploit WAGO I/O flaw via CVE-2026-4769securityonline.info · Jul 13, 2026