Source: cisa.gov
CISA published an ICS advisory (ICSA-26-293-02) regarding two HIGH severity vulnerabilities in the Web-Based Management (WBM) interface of multiple WAGO device families running WAGO OS Linux firmware versions 1.0.0 through 4.10.0. CVE-2026-80466 (CVSS 3.1: 8.8) is an OS Command Injection flaw in the WBM routing configuration that allows a low-privileged remote attacker to inject shell commands executed with root privileges. CVE-2026-88850 (CVSS 3.1: 8.1) is a Missing Authorization vulnerability in PROFIBUS configuration management that allows unauthorized modification of root-owned PROFIBUS parameters. Affected devices include CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller, and WP400 across 11 hardware model families. The fix is to update to firmware version 4.10.0 (FW32) or higher. These vulnerabilities impact critical infrastructure sectors including Chemical, Energy, Manufacturing, Transportation, and Water Systems worldwide. The vulnerabilities were reported by Ievgen Bondarenko and coordinated by CERT@VDE.
