Vendors and CVEs › Vendors › WAGO
WAGO: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name WAGO, from Thursday 5 November 2026 to Saturday 7 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Medium
Multiple WAGO controllers affected by CODESYS flaws that allow remote code execution
CERT@VDE advisory VDE-2025-081 says several WAGO devices are affected by flaws in CODESYS Control. The affected firmware versions are below 4.10.0 (FW32) and below 4.10.0 (70).
High
WAGO password reset flaw could let attackers take over accounts
A flaw in WAGO's credential recovery process lets an unauthenticated attacker bypass checks during password resets. The attacker could reset credentials for any user account and gain access without valid credentials.