Security Operations
Threat Intelligence
๐Ÿ”Ž
โ“

WAGO OS Linux

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-293-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices allow an authenticated low-privileged user to bypass intended privilege boundaries. The issues affect both the routing configuration functionality and the authorization model for PROFIBUS configuration management.</strong></p> <p>The following versions of WAGO OS Linux are affected:</p> <ul> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0751-9x01 vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0750-811x-xxxx-xxxx vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0750-821x-xxx-xxx vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-420x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-430x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-520x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-530x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-620x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) installed on WAGO Hardware 0762-630x-8000-000x vers:all/* (CVE-2026-80466, CVE-2026-88850)</li> <li>WAGO Firmware (vers:semver/&gt;=1.0.0|&lt;4.10.0) install
CRITICAL
Severity & confidence
Source severitycritical
Platform severitycritical
Confidencehigh
Exploitationunknown
CVSS-
Affected
Reporting sources (1)
CISA - Cybersecurity Advisories
Open source โ†—
Timeline & provenance
Published2026-10-20T16:25:30
Last updated2026-10-20T21:08:16
Ingested2026-10-20T16:25:30
FreshnessNEAR-REAL-TIME
Threat typeexploitation
Recommended action
No recommended action published with this item - review the original source.
Next steps
  1. Identify affected systems in your environment.
  2. Apply the vendor patch or mitigation guidance.
  3. Review logs for indicators described in the advisory.
  4. Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a government or cert-grade source (CISA, NCSC, NVD, ENISA, MSRC).
Source type: gov ยท Original: CISA - Cybersecurity Advisories