WAGO vulnerabilities

CVEs per yearBy the year they were published

1. 201930
2. 20204
3. 202114
4. 202410
5. 20241
6. 20253
7. 20267
8. 202612
9. 20269
10. 20269

Newest CVEs

• CVE-2025-41753

  Path traversal in dynamically created BACnet File Objects

  WAGO · 0751-9x01

  Critical9.3
• CVE-2026-4769

  Unauthenticated Access to Internal Diagnostic Interface

  WAGO · 0765-110x/0100-0000

  Critical9.3
• CVE-2023-5872

  Wago: Vulnerability in Smart Designer Web-Application

  Wago · Smart Designer

  Medium4.3
• CVE-2024-1490

  Wago: Vulnerability in WBM through Open VPN

  WAGO · CC100 (0751-9x01)

  High7.2
• CVE-2026-2328

  Backend Access Due to Insufficient Input Validation

  WAGO · Device Sphere

  High7.5
• CVE-2026-3587

  Hidden CLI Function Allows Root Access

  WAGO · Lean Managed Switch 852-1812

  Critical10.0
• CVE-2026-22906

  Hardcoded Key Allows Credential Disclosure

  WAGO · 0852-1322

  Critical9.8
• CVE-2026-22905

  Authentication Bypass via URI Traversal

  WAGO · 0852-1322

  High7.5
• CVE-2026-22904

  Stack Overflow via Oversized Cookie Fields in lighttpd

  WAGO · 0852-1322

  Critical9.8
• CVE-2026-22903

  Stack Overflow via SESSIONID Cookie in lighttpd

  WAGO · 0852-1322

  Critical9.8