WAGO vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20191
3. 202033
4. 202110
5. 20226
6. 202314
7. 202410
8. 202513
9. 202611

Newest CVEs

• CVE-2025-41753

  Path traversal in dynamically created BACnet File Objects

  WAGO · 0751-9x01

  Critical9.3
• CVE-2026-4769

  Unauthenticated Access to Internal Diagnostic Interface

  WAGO · 0765-110x/0100-0000

  Critical9.3
• CVE-2023-5872

  Wago: Vulnerability in Smart Designer Web-Application

  Wago · Smart Designer

  Medium4.3
• CVE-2024-1490

  Wago: Vulnerability in WBM through Open VPN

  WAGO · CC100 (0751-9x01)

  High7.2
• CVE-2026-2328

  Backend Access Due to Insufficient Input Validation

  WAGO · Device Sphere

  High7.5
• CVE-2026-3587

  Hidden CLI Function Allows Root Access

  WAGO · Lean Managed Switch 852-1812

  Critical10.0
• CVE-2026-22906

  Hardcoded Key Allows Credential Disclosure

  WAGO · 0852-1322

  Critical9.8
• CVE-2026-22905

  Authentication Bypass via URI Traversal

  WAGO · 0852-1322

  High7.5
• CVE-2026-22904

  Stack Overflow via Oversized Cookie Fields in lighttpd

  WAGO · 0852-1322

  Critical9.8
• CVE-2026-22903

  Stack Overflow via SESSIONID Cookie in lighttpd

  WAGO · 0852-1322

  Critical9.8