4
CVEs
2
Critical
1
High
0
KEV
0
PoC
1
Unpatched C/H
50.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
1
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (30)
750 881 Firmware
27
750 880 Firmware
26
750 889 Firmware
26
750 831 Firmware
26
750 852 Firmware
25
750 823 Firmware
24
750 862 Firmware
24
750 832 Firmware
24
750 891 Firmware
24
750 885 Firmware
24
750 882 Firmware
24
750 829 Firmware
23
750 890 Firmware
23
750 8202 Firmware
22
750 8207 Firmware
22
750 8210 Firmware
22
750 893 Firmware
22
750 8206 Firmware
22
750 8216 Firmware
22
750 8213 Firmware
22
750 8208 Firmware
22
750 8217 Firmware
22
750 8212 Firmware
22
750 8214 Firmware
22
750 8211 Firmware
22
750 8203 Firmware
21
750 8204 Firmware
21
Codesys
17
Pfc 200 Firmware
9
Pfc 100 Firmware
9
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-3587 | A hidden function in the CLI prompt of multiple WAGO industrial and lean managed switches allows unauthenticated remote attackers to escape the restricted interface and gain root access to the underlying Linux operating system. This results in complete device compromise with a maximum CVSS score of 10.0. The vulnerability affects over a dozen WAGO switch models used in industrial automation environments, and was disclosed by CERT@VDE. | CRITICAL | 10.0 | 0.1% | 50 |
No patch
|
| CVE-2026-4769 | Full system compromise of WAGO System I/O-Field series controllers (0765-xxx families) is possible when an unauthenticated remote attacker reaches an undocumented internal diagnostic interface that is briefly exposed during the device's early boot phase. Because the diagnostic capability requires no authentication and grants access to internal system processes, a successful attacker obtains complete control over confidentiality, integrity, and availability. Reported by CERT@VDE (VDE-2026-031); no public exploit code has been identified and it is not listed in CISA KEV at time of analysis. | CRITICAL | 9.3 | 0.4% | 46 |
|
| CVE-2026-2328 | Path traversal in WAGO Device Sphere and Solution Builder allows unauthenticated remote attackers to access backend components and expose sensitive information. The vulnerability stems from insufficient input validation (CWE-790), enabling attackers to bypass intended access boundaries with low complexity over network vectors. CVSS 7.5 (High) reflects significant confidentiality impact. EPSS data unavailable; no public exploit identified at time of analysis, and CISA KEV status not confirmed. | HIGH | 7.5 | 0.0% | 38 |
|
| CVE-2023-5872 | In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | MEDIUM | 4.3 | 0.1% | 22 |
No patch
|