VDE-2025-081
Nov. 6, 2026, 11:00 vorm.
Multiple WAGO devices are affected by CODESYS Control vulnerabilities. The affected WAGO firmware versions are <4.10.0 (FW32) and <4.10.0 (70).
VDE-2026-102
Nov. 4, 2026, 2:00 nachm.
A vulnerability in the authentication and credential recovery process may allow an unauthenticated attacker to bypass intended verification controls during password reset operations. By exploiting this weakness, an attacker could …
VDE-2026-132
Nov. 4, 2026, 11:00 vorm.
Critical vulnerabilities in the PHP runtime may allow a remote attacker to execute arbitrary code by exploiting weaknesses in PHP's internal memory and request handling mechanisms. Under specific conditions, specially …
VDE-2025-102
Okt. 1, 2026, 12:00 nachm.
Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is …
VDE-2026-031
Juli 13, 2026, 9:00 vorm.
Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly …
VDE-2024-008
April 8, 2026, 9:00 vorm.
A security vulnerability has been identified in the Web-Based Management (WBM) function when OpenVPN is enabled.
VDE-2026-010
März 30, 2026, 9:00 vorm.
Multiple vulnerabilities have been identified in WAGO Solution Builder and WAGO Device Sphere that affect components responsible for authentication and system communication.
VDE-2026-021
März 30, 2026, 9:00 vorm.
The VC Hub incorporates the Magick.NET‑Q16‑AnyCPU component, derived from ImageMagick, to process user‑uploaded images and generate thumbnails within the projects image library. Only authenticated users with the Design Project Permission …