WAGO OS Linux

As cited

Copy frozen at 2026-10-20 19:25 UTC (site build).

vulnerabilities

WAGO OS Linux

Two vulnerabilities affect WAGO industrial control devices running firmware versions before 4.10.0 (FW32). CVE-2026-80466 allows a low-privileged authenticated user to inject shell commands into routing configuration that execute with root privileges, while CVE-2026-88850 permits unauthorized modification of PROFIBUS configuration parameters by bypassing authorization controls. Both issues expose devices across chemical, manufacturing, energy, transportation, and water systems deployed worldwide.

Why it matters: Organizations managing WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller, or WP400 devices must patch immediately to firmware 4.10.0 (FW32) or higher to prevent low-privileged attackers from gaining root access or altering critical fieldbus settings in industrial control systems.

Source published

2026-10-20 12:00 UTC

First seen by Cybersecurity Tracker

2026-10-20 18:31 UTC