CVE-2026-4769: Unauthenticated Access to Internal Diagnostic Interface
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4769?
CVE-2026-4769 has a critical severity rating of 9.8.
What is CVE-2026-4769?
CVE-2026-4769 refers to an unauthenticated access vulnerability affecting certain devices in the WAGO System I/O Field series.
How do I fix CVE-2026-4769?
To mitigate CVE-2026-4769, ensure that the affected devices are not accessible during the initial startup sequence and apply any available firmware updates.
What are the potential impacts of CVE-2026-4769?
CVE-2026-4769 could allow an attacker to gain unauthorized access to internal diagnostic capabilities, leading to potential data breaches.
When was CVE-2026-4769 published?
CVE-2026-4769 was published on July 13, 2026.